mirror of
https://github.com/miniflux/v2.git
synced 2024-08-30 16:06:02 +02:00
179 lines
3.5 KiB
Go
179 lines
3.5 KiB
Go
// Copyright 2017 Frédéric Guillot. All rights reserved.
|
|
// Use of this source code is governed by the Apache 2.0
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package api // import "miniflux.app/api"
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
|
|
"miniflux.app/http/request"
|
|
"miniflux.app/http/response/json"
|
|
)
|
|
|
|
func (h *handler) currentUser(w http.ResponseWriter, r *http.Request) {
|
|
user, err := h.store.UserByID(request.UserID(r))
|
|
if err != nil {
|
|
json.ServerError(w, r, err)
|
|
return
|
|
}
|
|
|
|
json.OK(w, r, user)
|
|
}
|
|
|
|
func (h *handler) createUser(w http.ResponseWriter, r *http.Request) {
|
|
if !request.IsAdminUser(r) {
|
|
json.Forbidden(w, r)
|
|
return
|
|
}
|
|
|
|
user, err := decodeUserCreationPayload(r.Body)
|
|
if err != nil {
|
|
json.BadRequest(w, r, err)
|
|
return
|
|
}
|
|
|
|
if err := user.ValidateUserCreation(); err != nil {
|
|
json.BadRequest(w, r, err)
|
|
return
|
|
}
|
|
|
|
if h.store.UserExists(user.Username) {
|
|
json.BadRequest(w, r, errors.New("This user already exists"))
|
|
return
|
|
}
|
|
|
|
err = h.store.CreateUser(user)
|
|
if err != nil {
|
|
json.ServerError(w, r, err)
|
|
return
|
|
}
|
|
|
|
user.Password = ""
|
|
json.Created(w, r, user)
|
|
}
|
|
|
|
func (h *handler) updateUser(w http.ResponseWriter, r *http.Request) {
|
|
if !request.IsAdminUser(r) {
|
|
json.Forbidden(w, r)
|
|
return
|
|
}
|
|
|
|
userID := request.RouteInt64Param(r, "userID")
|
|
userChanges, err := decodeUserModificationPayload(r.Body)
|
|
if err != nil {
|
|
json.BadRequest(w, r, err)
|
|
return
|
|
}
|
|
|
|
originalUser, err := h.store.UserByID(userID)
|
|
if err != nil {
|
|
json.BadRequest(w, r, errors.New("Unable to fetch this user from the database"))
|
|
return
|
|
}
|
|
|
|
if originalUser == nil {
|
|
json.NotFound(w, r)
|
|
return
|
|
}
|
|
|
|
userChanges.Update(originalUser)
|
|
if err := originalUser.ValidateUserModification(); err != nil {
|
|
json.BadRequest(w, r, err)
|
|
return
|
|
}
|
|
|
|
if err = h.store.UpdateUser(originalUser); err != nil {
|
|
json.ServerError(w, r, err)
|
|
return
|
|
}
|
|
|
|
json.Created(w, r, originalUser)
|
|
}
|
|
|
|
func (h *handler) users(w http.ResponseWriter, r *http.Request) {
|
|
if !request.IsAdminUser(r) {
|
|
json.Forbidden(w, r)
|
|
return
|
|
}
|
|
|
|
users, err := h.store.Users()
|
|
if err != nil {
|
|
json.ServerError(w, r, err)
|
|
return
|
|
}
|
|
|
|
users.UseTimezone(request.UserTimezone(r))
|
|
json.OK(w, r, users)
|
|
}
|
|
|
|
func (h *handler) userByID(w http.ResponseWriter, r *http.Request) {
|
|
if !request.IsAdminUser(r) {
|
|
json.Forbidden(w, r)
|
|
return
|
|
}
|
|
|
|
userID := request.RouteInt64Param(r, "userID")
|
|
user, err := h.store.UserByID(userID)
|
|
if err != nil {
|
|
json.BadRequest(w, r, errors.New("Unable to fetch this user from the database"))
|
|
return
|
|
}
|
|
|
|
if user == nil {
|
|
json.NotFound(w, r)
|
|
return
|
|
}
|
|
|
|
user.UseTimezone(request.UserTimezone(r))
|
|
json.OK(w, r, user)
|
|
}
|
|
|
|
func (h *handler) userByUsername(w http.ResponseWriter, r *http.Request) {
|
|
if !request.IsAdminUser(r) {
|
|
json.Forbidden(w, r)
|
|
return
|
|
}
|
|
|
|
username := request.RouteStringParam(r, "username")
|
|
user, err := h.store.UserByUsername(username)
|
|
if err != nil {
|
|
json.BadRequest(w, r, errors.New("Unable to fetch this user from the database"))
|
|
return
|
|
}
|
|
|
|
if user == nil {
|
|
json.NotFound(w, r)
|
|
return
|
|
}
|
|
|
|
json.OK(w, r, user)
|
|
}
|
|
|
|
func (h *handler) removeUser(w http.ResponseWriter, r *http.Request) {
|
|
if !request.IsAdminUser(r) {
|
|
json.Forbidden(w, r)
|
|
return
|
|
}
|
|
|
|
userID := request.RouteInt64Param(r, "userID")
|
|
user, err := h.store.UserByID(userID)
|
|
if err != nil {
|
|
json.ServerError(w, r, err)
|
|
return
|
|
}
|
|
|
|
if user == nil {
|
|
json.NotFound(w, r)
|
|
return
|
|
}
|
|
|
|
if err := h.store.RemoveUser(user.ID); err != nil {
|
|
json.BadRequest(w, r, errors.New("Unable to remove this user from the database"))
|
|
return
|
|
}
|
|
|
|
json.NoContent(w, r)
|
|
}
|