87 lines
1.8 KiB
Go
87 lines
1.8 KiB
Go
package api
|
|
|
|
import (
|
|
"encoding/json"
|
|
"strconv"
|
|
"time"
|
|
|
|
"github.com/dgrijalva/jwt-go"
|
|
"github.com/gorilla/mux"
|
|
|
|
"net/http"
|
|
|
|
"github.com/thermokarst/bactdb/models"
|
|
)
|
|
|
|
func serveUser(w http.ResponseWriter, r *http.Request) error {
|
|
id, err := strconv.ParseInt(mux.Vars(r)["Id"], 10, 0)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
user, err := store.Users.Get(id)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return writeJSON(w, models.UserJSON{user})
|
|
}
|
|
|
|
func serveCreateUser(w http.ResponseWriter, r *http.Request) error {
|
|
var user models.UserJSON
|
|
err := json.NewDecoder(r.Body).Decode(&user)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
created, err := store.Users.Create(user.User)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if created {
|
|
w.WriteHeader(http.StatusCreated)
|
|
}
|
|
|
|
return writeJSON(w, user)
|
|
}
|
|
|
|
func serveUsers(w http.ResponseWriter, r *http.Request) error {
|
|
var opt models.UserListOptions
|
|
if err := schemaDecoder.Decode(&opt, r.URL.Query()); err != nil {
|
|
return err
|
|
}
|
|
|
|
users, err := store.Users.List(&opt)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if users == nil {
|
|
users = []*models.User{}
|
|
}
|
|
|
|
return writeJSON(w, models.UsersJSON{Users: users})
|
|
}
|
|
|
|
func serveAuthenticateUser(w http.ResponseWriter, r *http.Request) error {
|
|
username := r.FormValue("username")
|
|
password := r.FormValue("password")
|
|
|
|
user_session, err := store.Users.Authenticate(username, password)
|
|
if err != nil {
|
|
w.WriteHeader(http.StatusUnauthorized)
|
|
return err
|
|
}
|
|
|
|
t := jwt.New(jwt.GetSigningMethod("RS256"))
|
|
t.Claims["auth_level"] = user_session.AccessLevel
|
|
t.Claims["genus"] = user_session.Genus
|
|
t.Claims["exp"] = time.Now().Add(time.Minute * 60 * 24).Unix()
|
|
tokenString, err := t.SignedString(signKey)
|
|
if err != nil {
|
|
w.WriteHeader(http.StatusUnauthorized)
|
|
return err
|
|
}
|
|
user_session.Token = tokenString
|
|
|
|
return writeJSON(w, user_session)
|
|
}
|