mobility-accounts/handlers/accounts.go

package handlers

import (
	"errors"
	"fmt"
	"time"

	"git.coopgo.io/coopgo-platform/mobility-accounts/storage"
	"github.com/google/uuid"
	"github.com/santhosh-tekuri/jsonschema/v5"
	"golang.org/x/crypto/bcrypt"
)

func (h MobilityAccountsHandler) Login(username string, password string, namespace string) (*storage.Account, error) {

	if password == "" {
		return nil, errors.New("empty password not allowed")
	}
	account, err := h.storage.DB.LocalAuthentication(namespace, username, "", "")
	if err != nil {
		return nil, err
	}

	if err = bcrypt.CompareHashAndPassword([]byte(account.Authentication.Local.Password), []byte(password)); err != nil {
		return nil, err
	}
	return account, nil
}

func (h MobilityAccountsHandler) Register(account storage.Account) (*storage.Account, error) {
	if account.ID != "" {
		return nil, errors.New("id should be empty")
	}

	// Generate new UUID
	account.ID = uuid.NewString()

	// If a password was sent, hash the password
	if account.Authentication.Local.Password != "" {
		hashedPassword, err := bcrypt.GenerateFromPassword([]byte(account.Authentication.Local.Password), bcrypt.DefaultCost)
		if err != nil {
			return nil, err
		}
		account.Authentication.Local.Password = string(hashedPassword)
	}

	// Validate data schemas
	dataschemas := h.config.GetStringMap("data_schemas")
	for k, v := range account.Data {
		if !h.config.GetBool("allow_any_data") && dataschemas[k] == nil {
			return nil, errors.New("data scope not allowed")
		}

		if dataschemas[k] != nil {
			s := dataschemas[k].(map[string]string)
			sch, err := jsonschema.Compile(s["schema"])
			if err != nil {
				return nil, err
			}

			if err = sch.Validate(v); err != nil {
				return nil, err
			}
		}
	}

	// Set the "created" metadata
	if account.Metadata == nil {
		account.Metadata = map[string]any{}
	}
	account.Metadata["created"] = time.Now()

	// Store the account
	if err := h.storage.DB.CreateAccount(account); err != nil {
		return nil, err
	}

	return &account, nil
}

func (h MobilityAccountsHandler) UpdateData(accountid string, datas map[string]any) (*storage.Account, error) {
	account, err := h.storage.DB.GetAccount(accountid)
	if err != nil {
		return nil, err
	}

	// Validate data schemas and update account
	dataschemas := h.config.GetStringMap("data_schemas")
	for k, v := range datas {
		if !h.config.GetBool("allow_any_data") && dataschemas[k] == nil {
			fmt.Println("data scope not allowed")
			return nil, errors.New("data scope not allowed")
		}

		if dataschemas[k] != nil {
			s := dataschemas[k].(map[string]string)
			sch, err := jsonschema.Compile(s["schema"])
			if err != nil {
				fmt.Println(err)
				return nil, err
			}

			if err = sch.Validate(v); err != nil {
				fmt.Println(err)
				return nil, err
			}
		}
		account.Data[k] = v
	}
	if err = h.storage.DB.UpdateAccount(*account); err != nil {
		fmt.Println(err)
		return nil, err
	}

	return account, nil
}

func (h MobilityAccountsHandler) GetAccount(id string) (account *storage.Account, err error) {
	account, err = h.storage.DB.GetAccount(id)
	return
}

func (h MobilityAccountsHandler) GetAccountUsername(username string, namespace string) (account *storage.Account, err error) {
	account, err = h.storage.DB.LocalAuthentication(namespace, username, "", "")
	return
}

func (h MobilityAccountsHandler) GetAccounts(namespaces []string) (accounts []storage.Account, err error) {
	accounts, err = h.storage.DB.GetAccounts(namespaces)
	return
}

func (h MobilityAccountsHandler) GetAccountsBatch(accountIds []string) (accounts []storage.Account, err error) {
	if len(accountIds) == 0 {
		return accounts, nil
	}
	accounts, err = h.storage.DB.GetAccountsByIds(accountIds)
	return
}

func (h MobilityAccountsHandler) ChangePassword(accountid string, newpassword string) error {
	account, err := h.storage.DB.GetAccount(accountid)
	if err != nil {
		return err
	}

	hashedPassword, err := bcrypt.GenerateFromPassword([]byte(newpassword), bcrypt.DefaultCost)
	if err != nil {
		return err
	}
	account.Authentication.Local.Password = string(hashedPassword)

	if err = h.storage.DB.UpdateAccount(*account); err != nil {
		fmt.Println(err)
		return err
	}

	return nil
}