initial commit
This commit is contained in:
dhax
commit
93d8310491
46 changed files with 3379 additions and 0 deletions
225
api/app/account.go
Normal file
225
api/app/account.go
Normal file
|
|
@ -0,0 +1,225 @@
|
|||
package app
|
||||
|
||||
import (
|
||||
"context"
|
||||
"net/http"
|
||||
"strconv"
|
||||
"strings"
|
||||
|
||||
"github.com/go-chi/chi"
|
||||
"github.com/go-chi/render"
|
||||
validation "github.com/go-ozzo/ozzo-validation"
|
||||
|
||||
"github.com/dhax/go-base/auth"
|
||||
"github.com/dhax/go-base/logging"
|
||||
"github.com/dhax/go-base/models"
|
||||
)
|
||||
|
||||
type ctxKey int
|
||||
|
||||
const (
|
||||
ctxAccount ctxKey = iota
|
||||
)
|
||||
|
||||
// AccountStore defines database operations for account.
|
||||
type AccountStore interface {
|
||||
Get(id int) (*models.Account, error)
|
||||
Update(*models.Account) error
|
||||
Delete(*models.Account) error
|
||||
UpdateToken(*models.Token) error
|
||||
DeleteToken(*models.Token) error
|
||||
UpdateProfile(*models.Profile) error
|
||||
}
|
||||
|
||||
// AccountResource implements account managment handler.
|
||||
type AccountResource struct {
|
||||
Store AccountStore
|
||||
}
|
||||
|
||||
// NewAccountResource creates and returns an account resource.
|
||||
func NewAccountResource(store AccountStore) *AccountResource {
|
||||
return &AccountResource{
|
||||
Store: store,
|
||||
}
|
||||
}
|
||||
|
||||
func (rs *AccountResource) router() *chi.Mux {
|
||||
r := chi.NewRouter()
|
||||
r.Use(rs.accountCtx)
|
||||
r.Get("/", rs.get)
|
||||
r.Put("/", rs.update)
|
||||
r.Delete("/", rs.delete)
|
||||
r.Route("/token/{tokenID}", func(r chi.Router) {
|
||||
r.Put("/", rs.updateToken)
|
||||
r.Delete("/", rs.deleteToken)
|
||||
})
|
||||
r.Put("/profile", rs.updateProfile)
|
||||
return r
|
||||
}
|
||||
|
||||
func (rs *AccountResource) accountCtx(next http.Handler) http.Handler {
|
||||
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||||
claims := auth.ClaimsFromCtx(r.Context())
|
||||
logging.GetLogEntry(r).WithField("account_id", claims.ID)
|
||||
account, err := rs.Store.Get(claims.ID)
|
||||
if err != nil {
|
||||
// account deleted while access token still valid
|
||||
logging.GetLogEntry(r).WithField("account", claims.Sub).Warn(err)
|
||||
render.Render(w, r, ErrNotFound)
|
||||
return
|
||||
}
|
||||
ctx := context.WithValue(r.Context(), ctxAccount, account)
|
||||
next.ServeHTTP(w, r.WithContext(ctx))
|
||||
})
|
||||
}
|
||||
|
||||
type accountRequest struct {
|
||||
*models.Account
|
||||
// not really neccessary here as we limit updated database columns in store
|
||||
ProtectedID int `json:"id"`
|
||||
ProtectedActive bool `json:"active"`
|
||||
ProtectedRoles []string `json:"roles"`
|
||||
}
|
||||
|
||||
func (d *accountRequest) Bind(r *http.Request) error {
|
||||
// d.ProtectedActive = true
|
||||
// d.ProtectedRoles = []string{}
|
||||
return nil
|
||||
}
|
||||
|
||||
type accountResponse struct {
|
||||
*models.Account
|
||||
}
|
||||
|
||||
func newAccountResponse(a *models.Account) *accountResponse {
|
||||
resp := &accountResponse{Account: a}
|
||||
return resp
|
||||
}
|
||||
|
||||
func (rs *AccountResource) get(w http.ResponseWriter, r *http.Request) {
|
||||
acc := r.Context().Value(ctxAccount).(*models.Account)
|
||||
render.Respond(w, r, newAccountResponse(acc))
|
||||
}
|
||||
|
||||
func (rs *AccountResource) update(w http.ResponseWriter, r *http.Request) {
|
||||
acc := r.Context().Value(ctxAccount).(*models.Account)
|
||||
data := &accountRequest{Account: acc}
|
||||
if err := render.Bind(r, data); err != nil {
|
||||
render.Render(w, r, ErrInvalidRequest(err))
|
||||
return
|
||||
}
|
||||
|
||||
acc = data.Account
|
||||
if err := rs.Store.Update(acc); err != nil {
|
||||
switch err.(type) {
|
||||
case validation.Errors:
|
||||
render.Render(w, r, ErrValidation(err))
|
||||
return
|
||||
}
|
||||
render.Render(w, r, ErrRender(err))
|
||||
return
|
||||
}
|
||||
|
||||
render.Respond(w, r, newAccountResponse(acc))
|
||||
}
|
||||
|
||||
func (rs *AccountResource) delete(w http.ResponseWriter, r *http.Request) {
|
||||
acc := r.Context().Value(ctxAccount).(*models.Account)
|
||||
if err := rs.Store.Delete(acc); err != nil {
|
||||
render.Render(w, r, ErrRender(err))
|
||||
return
|
||||
}
|
||||
render.Respond(w, r, http.NoBody)
|
||||
}
|
||||
|
||||
type tokenRequest struct {
|
||||
Identifier string
|
||||
ProtectedID int `json:"id"`
|
||||
}
|
||||
|
||||
func (d *tokenRequest) Bind(r *http.Request) error {
|
||||
d.Identifier = strings.TrimSpace(d.Identifier)
|
||||
return nil
|
||||
}
|
||||
|
||||
func (rs *AccountResource) updateToken(w http.ResponseWriter, r *http.Request) {
|
||||
id, err := strconv.Atoi(chi.URLParam(r, "tokenID"))
|
||||
if err != nil {
|
||||
render.Respond(w, r, ErrBadRequest)
|
||||
return
|
||||
}
|
||||
data := &tokenRequest{}
|
||||
if err := render.Bind(r, data); err != nil {
|
||||
render.Respond(w, r, ErrInvalidRequest(err))
|
||||
return
|
||||
}
|
||||
acc := r.Context().Value(ctxAccount).(*models.Account)
|
||||
for _, t := range acc.Token {
|
||||
if t.ID == id {
|
||||
if err := rs.Store.UpdateToken(&models.Token{
|
||||
ID: t.ID,
|
||||
Identifier: data.Identifier,
|
||||
}); err != nil {
|
||||
render.Respond(w, r, ErrInvalidRequest(err))
|
||||
return
|
||||
}
|
||||
}
|
||||
}
|
||||
render.Respond(w, r, http.NoBody)
|
||||
}
|
||||
|
||||
func (rs *AccountResource) deleteToken(w http.ResponseWriter, r *http.Request) {
|
||||
id, err := strconv.Atoi(chi.URLParam(r, "tokenID"))
|
||||
if err != nil {
|
||||
render.Respond(w, r, ErrBadRequest)
|
||||
return
|
||||
}
|
||||
acc := r.Context().Value(ctxAccount).(*models.Account)
|
||||
for _, t := range acc.Token {
|
||||
if t.ID == id {
|
||||
rs.Store.DeleteToken(&models.Token{ID: t.ID})
|
||||
}
|
||||
}
|
||||
render.Respond(w, r, http.NoBody)
|
||||
}
|
||||
|
||||
type profileRequest struct {
|
||||
*models.Profile
|
||||
ProtectedID int `json:"id"`
|
||||
}
|
||||
|
||||
func (d *profileRequest) Bind(r *http.Request) error {
|
||||
// d.ProtectedActive = true
|
||||
// d.ProtectedRoles = []string{}
|
||||
return nil
|
||||
}
|
||||
|
||||
type profileResponse struct {
|
||||
*models.Profile
|
||||
}
|
||||
|
||||
func newProfileResponse(p *models.Profile) *profileResponse {
|
||||
return &profileResponse{
|
||||
Profile: p,
|
||||
}
|
||||
}
|
||||
|
||||
func (rs *AccountResource) updateProfile(w http.ResponseWriter, r *http.Request) {
|
||||
acc := r.Context().Value(ctxAccount).(*models.Account)
|
||||
data := &profileRequest{Profile: acc.Profile}
|
||||
if err := render.Bind(r, data); err != nil {
|
||||
render.Render(w, r, ErrInvalidRequest(err))
|
||||
}
|
||||
|
||||
p := data.Profile
|
||||
if err := rs.Store.UpdateProfile(p); err != nil {
|
||||
switch err.(type) {
|
||||
case validation.Errors:
|
||||
render.Render(w, r, ErrValidation(err))
|
||||
return
|
||||
}
|
||||
render.Render(w, r, ErrRender(err))
|
||||
return
|
||||
}
|
||||
render.Respond(w, r, newProfileResponse(p))
|
||||
}
|
||||
33
api/app/api.go
Normal file
33
api/app/api.go
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
package app
|
||||
|
||||
import (
|
||||
"github.com/go-chi/chi"
|
||||
"github.com/go-pg/pg"
|
||||
|
||||
"github.com/dhax/go-base/database"
|
||||
)
|
||||
|
||||
// API provides application resources and handlers.
|
||||
type API struct {
|
||||
Account *AccountResource
|
||||
}
|
||||
|
||||
// NewAPI configures and returns application API.
|
||||
func NewAPI(db *pg.DB) (*API, error) {
|
||||
accountStore := database.NewAccountStore(db)
|
||||
account := NewAccountResource(accountStore)
|
||||
|
||||
api := &API{
|
||||
Account: account,
|
||||
}
|
||||
return api, nil
|
||||
}
|
||||
|
||||
// Router provides application routes.
|
||||
func (a *API) Router() *chi.Mux {
|
||||
r := chi.NewRouter()
|
||||
|
||||
r.Mount("/account", a.Account.router())
|
||||
|
||||
return r
|
||||
}
|
||||
81
api/app/errors.go
Normal file
81
api/app/errors.go
Normal file
|
|
@ -0,0 +1,81 @@
|
|||
package app
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"net/http"
|
||||
|
||||
"github.com/go-chi/render"
|
||||
)
|
||||
|
||||
// ErrResponse renderer type for handling all sorts of errors.
|
||||
type ErrResponse struct {
|
||||
Err error `json:"-"` // low-level runtime error
|
||||
HTTPStatusCode int `json:"-"` // http response status code
|
||||
|
||||
StatusText string `json:"status"` // user-level status message
|
||||
AppCode int64 `json:"code,omitempty"` // application-specific error code
|
||||
ErrorText string `json:"error,omitempty"` // application-level error message, for debugging
|
||||
}
|
||||
|
||||
// Render sets the application-specific error code in AppCode.
|
||||
func (e *ErrResponse) Render(w http.ResponseWriter, r *http.Request) error {
|
||||
render.Status(r, e.HTTPStatusCode)
|
||||
return nil
|
||||
}
|
||||
|
||||
// ErrInvalidRequest returns status 422 Unprocessable Entity including error message.
|
||||
func ErrInvalidRequest(err error) render.Renderer {
|
||||
return &ErrResponse{
|
||||
Err: err,
|
||||
HTTPStatusCode: http.StatusUnprocessableEntity,
|
||||
StatusText: http.StatusText(http.StatusUnprocessableEntity),
|
||||
ErrorText: err.Error(),
|
||||
}
|
||||
}
|
||||
|
||||
// ErrValidationResponse renderer for handling validation errors.
|
||||
type ErrValidationResponse struct {
|
||||
*ErrResponse
|
||||
Errors string `json:"errors,omitempty"`
|
||||
}
|
||||
|
||||
// Render sets the application-specific error code in AppCode.
|
||||
func (ev *ErrValidationResponse) Render(w http.ResponseWriter, r *http.Request) error {
|
||||
render.Status(r, ev.ErrResponse.HTTPStatusCode)
|
||||
return nil
|
||||
}
|
||||
|
||||
// ErrValidation returns status 422 Unprocessable Entity stating validation errors.
|
||||
func ErrValidation(valErrors error) render.Renderer {
|
||||
b, _ := json.Marshal(valErrors)
|
||||
return &ErrValidationResponse{
|
||||
&ErrResponse{
|
||||
Err: nil,
|
||||
HTTPStatusCode: http.StatusUnprocessableEntity,
|
||||
StatusText: http.StatusText(http.StatusUnprocessableEntity),
|
||||
ErrorText: "object validation error",
|
||||
},
|
||||
string(b),
|
||||
}
|
||||
}
|
||||
|
||||
// ErrRender returns status 422 Unprocessable Entity rendering response error.
|
||||
func ErrRender(err error) render.Renderer {
|
||||
return &ErrResponse{
|
||||
Err: err,
|
||||
HTTPStatusCode: http.StatusUnprocessableEntity,
|
||||
StatusText: http.StatusText(http.StatusUnprocessableEntity),
|
||||
ErrorText: err.Error(),
|
||||
}
|
||||
}
|
||||
|
||||
var (
|
||||
// ErrBadRequest return status 400 Bad Request for malformed request body.
|
||||
ErrBadRequest = &ErrResponse{HTTPStatusCode: http.StatusBadRequest, StatusText: http.StatusText(http.StatusBadRequest)}
|
||||
|
||||
// ErrNotFound returns status 404 Not Found for invalid resource request.
|
||||
ErrNotFound = &ErrResponse{HTTPStatusCode: http.StatusNotFound, StatusText: http.StatusText(http.StatusNotFound)}
|
||||
|
||||
// ErrInternalServerError returns status 500 Internal Server Error.
|
||||
ErrInternalServerError = &ErrResponse{HTTPStatusCode: http.StatusInternalServerError, StatusText: http.StatusText(http.StatusInternalServerError)}
|
||||
)
|
||||
Loading…
Add table
Add a link
Reference in a new issue