admin/controller/account/user.go

/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package account

import (
	"net/http"
	"time"
)

import (
	"github.com/gin-gonic/gin"

	"github.com/golang-jwt/jwt/v4"
)

import (
	"github.com/apache/dubbo-go-pixiu/admin/config"
	"github.com/apache/dubbo-go-pixiu/admin/controller/auth"
	"github.com/apache/dubbo-go-pixiu/admin/logic/account"
)

// @Tags Account
// @Summary user logout
// @Description log out the current user (invalidate the token)
// @Produce application/json
// @Success 200 {object} string
// @Router /user/logout [post]
// Logout user logout
func Logout(c *gin.Context) {
	// Invalid setting token
	j := auth.NewJWT()
	claims := auth.CustomClaims{
		StandardClaims: jwt.StandardClaims{
			NotBefore: int64(time.Now().Unix()), // Signature effective time
			ExpiresAt: int64(time.Now().Unix()), // Signature expiration time
			Issuer:    "dubbo-go-pixiu",
		},
	}
	token, err := j.CreateToken(claims)
	if err != nil {
		c.JSON(http.StatusOK, config.WithError(err))
		return
	}
	// TODO Optimize the returned json
	c.JSON(http.StatusOK, config.WithRet(token))
}

// @Tags Account
// @Summary modify account password
// @Description to modify the current user's password, the username must be included in the header.
// @Accept application/x-www-form-urlencoded
// @Produce application/json
// @Param oldPassword formData string true "old password"
// @Param newPassword formData string true "new password"
// @Success 200 {object} string
// @Failure 200 {object} string
// @Router /user/password/edit [post]
// EditPassword modify account password
func EditPassword(c *gin.Context) {

	oldPassword := c.PostForm("oldPassword")
	newPassword := c.PostForm("newPassword")

	//if flag, _ := regexp.MatchString("^(?![0-9]+$)(?![a-zA-Z]+$)[0-9A-Za-z]{6,20}$", oldPassword); !flag {
	//	c.JSON(http.StatusOK, gin.H{
	//		"status": -1,
	//		"msg":    "illegal oldPassword",
	//		"data":   nil,
	//	})
	//	return
	//}
	//
	//if flag, _ := regexp.MatchString("^(?![0-9]+$)(?![a-zA-Z]+$)[0-9A-Za-z]{6,20}$", newPassword); !flag {
	//	c.JSON(http.StatusOK, gin.H{
	//		"status": -1,
	//		"msg":    "illegal newPassword",
	//		"data":   nil,
	//	})
	//	return
	//}
	username := c.Request.Header.Get("username")
	flag, err := account.EditPassword(oldPassword, newPassword, username)
	if !flag {
		c.JSON(http.StatusOK, config.WithError(err))
		return
	}
	c.JSON(http.StatusOK, config.WithRet("Successfully modify the password!"))
	// TODO Do I need to update the token?
	//generateToken(c, username)
}

// @Tags Account
// @Summary get user information
// @Description return the current user's detailed information. The header must include the username.
// @Produce application/json
// @Success 200 {object} string
// @Failure 200 {object} string
// @Router /user/getInfo [post]
// GetUserInfo get user information
func GetUserInfo(c *gin.Context) {
	username := c.Request.Header.Get("username")
	flag, userInfo, err := account.GetUserInfo(username)
	if !flag {
		c.JSON(http.StatusOK, config.WithError(err))
		return
	}
	c.JSON(http.StatusOK, config.WithRet(userInfo))
}

// @Tags Account
// @Summary get user role
// @Description return the current user's role information. The header must include the username.
// @Produce application/json
// @Success 200 {object} string
// @Failure 200 {object} string
// @Router /user/getUserRole [post]
// GetUserRole get user role
func GetUserRole(c *gin.Context) {
	username := c.Request.Header.Get("username")
	flag, result, err := account.GetUserRole(username)
	if !flag {
		c.JSON(http.StatusOK, config.WithError(err))
		return
	}
	c.JSON(http.StatusOK, config.WithRet(result))
}

// @Tags Account
// @Summary determine whether you are an administrator
// @Description to determine whether the current user is an administrator, the header must include the username.
// @Produce application/json
// @Success 200 {object} string
// @Failure 200 {object} string
// @Router /user/checkIsAdmin [post]
// CheckUserIsAdmin determine whether you are an administrator
func CheckUserIsAdmin(c *gin.Context) {
	username := c.Request.Header.Get("username")
	flag, err := account.CheckUserIsAdmin(username)
	if !flag {
		c.JSON(http.StatusOK, config.WithError(err))
		return
	}
	c.JSON(http.StatusOK, config.WithRet("This user is admin"))
}