summaryrefslogtreecommitdiff
path: root/api/keys/keys.go
blob: cef3f3c7e1a2796a8f3c1db7b8d6e059ec00334e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
package keys

import (
	"log"
	"net/http"

	"git.hatecomputers.club/hatecomputers/hatecomputers.club/api/types"
	"git.hatecomputers.club/hatecomputers/hatecomputers.club/database"
	"git.hatecomputers.club/hatecomputers/hatecomputers.club/utils"
)

const MAX_USER_API_KEYS = 5

func ListAPIKeysContinuation(context *types.RequestContext, req *http.Request, resp http.ResponseWriter) types.ContinuationChain {
	return func(success types.Continuation, failure types.Continuation) types.ContinuationChain {
		typesKeys, err := database.ListUserAPIKeys(context.DBConn, context.User.ID)
		if err != nil {
			log.Println(err)
			resp.WriteHeader(http.StatusInternalServerError)
			return failure(context, req, resp)
		}

		(*context.TemplateData)["APIKeys"] = typesKeys
		return success(context, req, resp)
	}
}

func CreateAPIKeyContinuation(context *types.RequestContext, req *http.Request, resp http.ResponseWriter) types.ContinuationChain {
	return func(success types.Continuation, failure types.Continuation) types.ContinuationChain {
		formErrors := types.FormError{
			Errors: []string{},
		}

		numKeys, err := database.CountUserAPIKeys(context.DBConn, context.User.ID)
		if err != nil {
			log.Println(err)
			resp.WriteHeader(http.StatusInternalServerError)
			return failure(context, req, resp)
		}

		if numKeys >= MAX_USER_API_KEYS {
			formErrors.Errors = append(formErrors.Errors, "max types keys reached")
		}

		if len(formErrors.Errors) > 0 {
			(*context.TemplateData)["FormError"] = formErrors
			return failure(context, req, resp)
		}

		_, err = database.SaveAPIKey(context.DBConn, &database.UserApiKey{
			UserID: context.User.ID,
			Key:    utils.RandomId(),
		})
		if err != nil {
			log.Println(err)
			resp.WriteHeader(http.StatusInternalServerError)
			return failure(context, req, resp)
		}
		return success(context, req, resp)
	}
}

func DeleteAPIKeyContinuation(context *types.RequestContext, req *http.Request, resp http.ResponseWriter) types.ContinuationChain {
	return func(success types.Continuation, failure types.Continuation) types.ContinuationChain {
		apiKey := req.FormValue("key")

		key, err := database.GetAPIKey(context.DBConn, apiKey)
		if err != nil {
			log.Println(err)
			resp.WriteHeader(http.StatusInternalServerError)
			return failure(context, req, resp)
		}
		if (key == nil) || (key.UserID != context.User.ID) {
			resp.WriteHeader(http.StatusUnauthorized)
			return failure(context, req, resp)
		}

		err = database.DeleteAPIKey(context.DBConn, apiKey)
		if err != nil {
			log.Println(err)
			resp.WriteHeader(http.StatusInternalServerError)
			return failure(context, req, resp)
		}

		return success(context, req, resp)
	}
}