user_settings.go

package api

import (
	"encoding/json"
	"net/http"
	"net/mail"

	"github.com/go-chi/chi"
	"github.com/urandom/readeef/content"
	"github.com/urandom/readeef/content/repo"
	"github.com/urandom/readeef/log"
)

const (
	firstNameSetting = "first-name"
	lastNameSetting  = "last-name"
	emailSetting     = "email"
	profileSetting   = "profile"
	activeSetting    = "is-active"
	passwordSetting  = "password"
)

func getSettingKeys(w http.ResponseWriter, r *http.Request) {
	args{"keys": []string{
		firstNameSetting, lastNameSetting,
		emailSetting, profileSetting,
		activeSetting, passwordSetting,
	}}.WriteJSON(w)
}

func getSettingValue(w http.ResponseWriter, r *http.Request) {
	user, stop := userFromRequest(w, r)
	if stop {
		return
	}

	var val interface{}
	switch chi.URLParam(r, "key") {
	case firstNameSetting:
		val = user.FirstName
	case lastNameSetting:
		val = user.LastName
	case emailSetting:
		val = user.Email
	case profileSetting:
		val = user.ProfileData
	case activeSetting:
		val = user.Active
	default:
		http.Error(w, http.StatusText(http.StatusNotFound), http.StatusNotFound)
		return
	}

	args{"value": val}.WriteJSON(w)
}

func setSettingValue(repo repo.User, secret []byte, log log.Log) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		user, stop := userFromRequest(w, r)
		if stop {
			return
		}

		if name := content.Login(chi.URLParam(r, "name")); name != "" {
			var err error
			user, err = repo.Get(name)
			if err != nil {
				fatal(w, log, "Error getting user: %+v", err)
				return
			}
		}

		value := r.Form.Get("value")

		var err error
		switch chi.URLParam(r, "key") {
		case firstNameSetting:
			user.FirstName = value
		case lastNameSetting:
			user.LastName = value
		case emailSetting:
			email := value
			if _, err = mail.ParseAddress(email); err != nil {
				log.Printf("Error parsing address %s: %v", email, err)
				http.Error(w, "Invalid email format", http.StatusBadRequest)
				return
			}

			user.Email = email
		case profileSetting:
			err = json.Unmarshal([]byte(value), &user.ProfileData)
		case activeSetting:
			user.Active = value == "true"
		case passwordSetting:
			var auth bool
			if auth, err = user.Authenticate(r.Form.Get("current"), secret); auth {
				err = user.Password(value, secret)
			} else {
				http.Error(w, "Not authorized", http.StatusBadRequest)
				return
			}
		default:
			http.Error(w, http.StatusText(http.StatusNotFound), http.StatusNotFound)
			return
		}

		if err == nil {
			err = repo.Update(user)
		}

		if err == nil {
			args{"success": true}.WriteJSON(w)
		} else {
			fatal(w, log, "Error setting user setting: %+v", err)
		}
	}
}