summaryrefslogtreecommitdiff
path: root/pkg/database/accounts.go
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--pkg/database/accounts.go147
1 files changed, 111 insertions, 36 deletions
diff --git a/pkg/database/accounts.go b/pkg/database/accounts.go
index f506155..2c1dc6d 100644
--- a/pkg/database/accounts.go
+++ b/pkg/database/accounts.go
@@ -2,6 +2,7 @@ package database
import (
"database/sql"
+ "encoding/json"
"errors"
"fmt"
"log/slog"
@@ -17,6 +18,99 @@ var AdvertiseAdminPassword = func(password string) {
slog.Info("Generated an initial admin password, please change it or delete the admin account after your first login", "password", password)
}
+func (db *DB) InitAdminAccount() error {
+ return db.WithTransaction(func(tx *sql.Tx) error {
+ var hasAdminAccount bool
+ if err := tx.QueryRowContext(db.ctx, `SELECT EXISTS (SELECT 1 FROM accounts WHERE is_admin);`).Scan(&hasAdminAccount); err != nil {
+ return fmt.Errorf("failed to select if there is an admin account in the database: %w", err)
+ }
+ if !hasAdminAccount {
+ var accountId uuid.UUID
+ if err := accountId.Generate(uuid.V7); err != nil {
+ return fmt.Errorf("failed to generate account id: %w", err)
+ }
+ var password uuid.UUID
+ if err := password.Generate(uuid.V4); err != nil {
+ return fmt.Errorf("failed to generate initial admin password: %w", err)
+ }
+ salt := helpers.GenerateSalt()
+ hash := helpers.HashPassword(password.String(), salt)
+ if _, err := tx.ExecContext(db.ctx,
+ `INSERT INTO accounts(id, username, salt, password_hash, is_admin, settings)
+ VALUES (:id, "admin", :salt, :hash, TRUE, :settings)
+ ON CONFLICT DO UPDATE SET password_hash = :hash
+ WHERE username = "admin";`,
+ sql.Named("id", accountId),
+ sql.Named("hash", hash),
+ sql.Named("salt", salt),
+ sql.Named("settings", []byte("{}")),
+ ); err == nil {
+ AdvertiseAdminPassword(password.String())
+ } else {
+ return fmt.Errorf("failed to set initial admin password: %w", err)
+ }
+ }
+ return nil
+ })
+}
+
+func (db *DB) LoadAccountUsernames() (map[string]string, error) {
+ rows, err := db.Query(
+ `SELECT id, username FROM accounts;`)
+ if err != nil {
+ return nil, fmt.Errorf("failed to load accounts from database: %w", err)
+ }
+ defer rows.Close()
+ accounts := make(map[string]string)
+ for rows.Next() {
+ var (
+ id string
+ username string
+ )
+ err = rows.Scan(&id, &username)
+ if err != nil {
+ return nil, fmt.Errorf("failed to load account from row: %w", err)
+ }
+ accounts[id] = username
+ }
+ if err := rows.Err(); err != nil {
+ return nil, fmt.Errorf("failed to load accounts from rows: %w", err)
+ }
+ return accounts, nil
+}
+
+func (db *DB) LoadAccountById(id string) (*model.Account, error) {
+ account := model.Account{
+ Id: id,
+ }
+ var (
+ created int64
+ lastLogin int64
+ )
+ err := db.QueryRow(
+ `SELECT username, salt, password_hash, is_admin, created, last_login, settings
+ FROM accounts
+ WHERE id = ?;`,
+ id,
+ ).Scan(&account.Username,
+ &account.Salt,
+ &account.PasswordHash,
+ &account.IsAdmin,
+ &created,
+ &lastLogin,
+ &account.Settings,
+ )
+ if err != nil {
+ if errors.Is(err, sql.ErrNoRows) {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to load account by id %s: %w", id, err)
+ }
+ account.Created = time.Unix(created, 0)
+ account.LastLogin = time.Unix(lastLogin, 0)
+ return &account, nil
+}
+
func (db *DB) LoadAccountByUsername(username string) (*model.Account, error) {
account := model.Account{
Username: username,
@@ -42,50 +136,31 @@ func (db *DB) LoadAccountByUsername(username string) (*model.Account, error) {
if errors.Is(err, sql.ErrNoRows) {
return nil, nil
}
- return nil, err
+ return nil, fmt.Errorf("failed to load account by username %s: %w", username, err)
}
account.Created = time.Unix(created, 0)
account.LastLogin = time.Unix(lastLogin, 0)
return &account, nil
}
-func (db *DB) InitAdminAccount() error {
- tx, err := db.Begin()
+func (db *DB) SaveAccountSettings(account *model.Account, settings *model.Settings) error {
+ data, err := json.Marshal(settings)
if err != nil {
- return err
+ return fmt.Errorf("failed to marshal settings for user %s: %w", account.Username, err)
}
- defer func() {
- if err != nil {
- _ = tx.Rollback()
- }
- }()
- var hasAdminAccount bool
- if err = tx.QueryRowContext(db.ctx, `SELECT EXISTS (SELECT 1 FROM accounts WHERE is_admin);`).Scan(&hasAdminAccount); err != nil {
- return fmt.Errorf("failed to select if there is an admin account in the database: %w", err)
+ _, err = db.Exec(`UPDATE accounts SET settings = ? WHERE id = ?`, data, account.Id)
+ if err != nil {
+ return fmt.Errorf("failed to update settings for user %s: %w", account.Username, err)
}
- if hasAdminAccount {
- tx.Rollback()
- } else {
- var password uuid.UUID
- if err = password.Generate(uuid.V4); err != nil {
- return fmt.Errorf("failed to generate initial admin password: %w", err)
- }
- salt := helpers.GenerateSalt()
- hash := helpers.HashPassword(password.String(), salt)
- if _, err = tx.ExecContext(db.ctx,
- `INSERT INTO accounts(username, salt, password_hash, is_admin)
- VALUES ("admin", :salt, :hash, TRUE)
- ON CONFLICT DO UPDATE SET password_hash = :hash
- WHERE username = "admin";`,
- sql.Named("salt", salt),
- sql.Named("hash", hash),
- ); err != nil {
- return fmt.Errorf("failed to set initial admin password: %w", err)
- }
- err = tx.Commit()
- if err == nil {
- AdvertiseAdminPassword(password.String())
- }
+ return nil
+}
+
+func (db *DB) TouchAccount(account *model.Account) error {
+ now := time.Now().UTC()
+ _, err := db.Exec(`UPDATE accounts SET last_login = ? WHERE id = ?`, now.Unix(), account.Id)
+ if err != nil {
+ return fmt.Errorf("failed to update last_login for user %s: %w", account.Username, err)
}
- return err
+ account.LastLogin = now
+ return nil
}