133 lines
4.0 KiB
Go
133 lines
4.0 KiB
Go
package models
|
|
|
|
import (
|
|
"GoWeb/app"
|
|
"log"
|
|
"net/http"
|
|
"strconv"
|
|
"time"
|
|
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
type User struct {
|
|
Id int64
|
|
Username string
|
|
Password string
|
|
CreatedAt time.Time
|
|
UpdatedAt time.Time
|
|
}
|
|
|
|
const userColumnsNoId = "\"Username\", \"Password\", \"CreatedAt\", \"UpdatedAt\""
|
|
const userColumns = "\"Id\", " + userColumnsNoId
|
|
const userTable = "public.\"User\""
|
|
|
|
const (
|
|
selectUserById = "SELECT " + userColumns + " FROM " + userTable + " WHERE \"Id\" = $1"
|
|
selectUserByUsername = "SELECT " + userColumns + " FROM " + userTable + " WHERE \"Username\" = $1"
|
|
insertUser = "INSERT INTO " + userTable + " (" + userColumnsNoId + ") VALUES ($1, $2, $3, $4) RETURNING \"Id\""
|
|
)
|
|
|
|
// GetCurrentUser finds the currently logged-in user by session cookie
|
|
func GetCurrentUser(app *app.App, r *http.Request) (User, error) {
|
|
cookie, err := r.Cookie("session")
|
|
if err != nil {
|
|
log.Println("Error getting session cookie")
|
|
return User{}, err
|
|
}
|
|
|
|
session, err := GetSessionByAuthToken(app, cookie.Value)
|
|
if err != nil {
|
|
log.Println("Error getting session by auth token")
|
|
return User{}, err
|
|
}
|
|
|
|
return GetUserById(app, session.UserId)
|
|
}
|
|
|
|
// GetUserById finds a User table row in the database by id and returns a struct representing this row
|
|
func GetUserById(app *app.App, id int64) (User, error) {
|
|
user := User{}
|
|
|
|
// Query row by id
|
|
err := app.Db.QueryRow(selectUserById, id).Scan(&user.Id, &user.Username, &user.Password, &user.CreatedAt, &user.UpdatedAt)
|
|
if err != nil {
|
|
log.Println("Get user error (user not found) for user id:" + strconv.FormatInt(id, 10))
|
|
return User{}, err
|
|
}
|
|
|
|
return user, nil
|
|
}
|
|
|
|
// GetUserByUsername finds a User table row in the database by username and returns a struct representing this row
|
|
func GetUserByUsername(app *app.App, username string) (User, error) {
|
|
user := User{}
|
|
|
|
// Query row by username
|
|
err := app.Db.QueryRow(selectUserByUsername, username).Scan(&user.Id, &user.Username, &user.Password, &user.CreatedAt, &user.UpdatedAt)
|
|
if err != nil {
|
|
log.Println("Get user error (user not found) for user:" + username)
|
|
return User{}, err
|
|
}
|
|
|
|
return user, nil
|
|
}
|
|
|
|
// CreateUser creates a User table row in the database
|
|
func CreateUser(app *app.App, username string, password string, createdAt time.Time, updatedAt time.Time) (User, error) {
|
|
// Hash password
|
|
hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
log.Println("Error hashing password when creating user")
|
|
return User{}, err
|
|
}
|
|
|
|
var lastInsertId int64
|
|
|
|
err = app.Db.QueryRow(insertUser, username, string(hash), createdAt, updatedAt).Scan(&lastInsertId)
|
|
if err != nil {
|
|
log.Println("Error creating user row")
|
|
return User{}, err
|
|
}
|
|
|
|
return GetUserById(app, lastInsertId)
|
|
}
|
|
|
|
// AuthenticateUser validates the password for the specified user
|
|
func AuthenticateUser(app *app.App, w http.ResponseWriter, username string, password string, remember bool) (Session, error) {
|
|
var user User
|
|
|
|
// Query row by username
|
|
err := app.Db.QueryRow(selectUserByUsername, username).Scan(&user.Id, &user.Username, &user.Password, &user.CreatedAt, &user.UpdatedAt)
|
|
if err != nil {
|
|
log.Println("Authentication error (user not found) for user:" + username)
|
|
return Session{}, err
|
|
}
|
|
|
|
// Validate password
|
|
err = bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password))
|
|
if err != nil { // Failed to validate password, doesn't match
|
|
log.Println("Authentication error (incorrect password) for user:" + username)
|
|
return Session{}, err
|
|
} else {
|
|
return CreateSession(app, w, user.Id, remember)
|
|
}
|
|
}
|
|
|
|
// LogoutUser deletes the session cookie and AuthToken from the database
|
|
func LogoutUser(app *app.App, w http.ResponseWriter, r *http.Request) {
|
|
// Get cookie from request
|
|
cookie, err := r.Cookie("session")
|
|
if err != nil {
|
|
log.Println("Error getting cookie from request")
|
|
return
|
|
}
|
|
|
|
// Set token to empty string
|
|
err = DeleteSessionByAuthToken(app, w, cookie.Value)
|
|
if err != nil {
|
|
log.Println("Error deleting session by AuthToken")
|
|
return
|
|
}
|
|
}
|