• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

mendersoftware / useradm / 1806832573

08 May 2025 07:30AM UTC coverage: 59.747% (-27.3%) from 87.019%
1806832573

Pull #439

gitlab-ci

alfrunes
chore(docker): Clean up build command for acceptance test image

Signed-off-by: Alf-Rune Siqveland <alf.rune@northern.tech>
Pull Request #439: :building_construction: Upgrade dependencies

2363 of 3955 relevant lines covered (59.75%)

12.76 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

88.33
/api/http/api_useradm.go
1
// Copyright 2023 Northern.tech AS
2
//
3
//        Licensed under the Apache License, Version 2.0 (the "License");
4
//        you may not use this file except in compliance with the License.
5
//        You may obtain a copy of the License at
6
//
7
//            http://www.apache.org/licenses/LICENSE-2.0
8
//
9
//        Unless required by applicable law or agreed to in writing, software
10
//        distributed under the License is distributed on an "AS IS" BASIS,
11
//        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
//        See the License for the specific language governing permissions and
13
//        limitations under the License.
14
package http
15

16
import (
17
        "context"
18
        "net/http"
19
        "strings"
20
        "time"
21

22
        "github.com/ant0ine/go-json-rest/rest"
23
        "github.com/google/uuid"
24
        "github.com/mendersoftware/go-lib-micro/identity"
25
        "github.com/mendersoftware/go-lib-micro/log"
26
        "github.com/mendersoftware/go-lib-micro/rest_utils"
27
        "github.com/mendersoftware/go-lib-micro/routing"
28
        "github.com/pkg/errors"
29

30
        "github.com/mendersoftware/useradm/authz"
31
        "github.com/mendersoftware/useradm/jwt"
32
        "github.com/mendersoftware/useradm/model"
33
        "github.com/mendersoftware/useradm/store"
34
        useradm "github.com/mendersoftware/useradm/user"
35
)
36

37
const (
38
        apiUrlManagementV1       = "/api/management/v1/useradm"
39
        uriManagementAuthLogin   = apiUrlManagementV1 + "/auth/login"
40
        uriManagementAuthLogout  = apiUrlManagementV1 + "/auth/logout"
41
        uriManagementUser        = apiUrlManagementV1 + "/users/#id"
42
        uriManagementUsers       = apiUrlManagementV1 + "/users"
43
        uriManagementSettings    = apiUrlManagementV1 + "/settings"
44
        uriManagementSettingsMe  = apiUrlManagementV1 + "/settings/me"
45
        uriManagementTokens      = apiUrlManagementV1 + "/settings/tokens"
46
        uriManagementToken       = apiUrlManagementV1 + "/settings/tokens/#id"
47
        uriManagementPlans       = apiUrlManagementV1 + "/plans"
48
        uriManagementPlanBinding = apiUrlManagementV1 + "/plan_binding"
49

50
        apiUrlInternalV1  = "/api/internal/v1/useradm"
51
        uriInternalAlive  = apiUrlInternalV1 + "/alive"
52
        uriInternalHealth = apiUrlInternalV1 + "/health"
53

54
        uriInternalAuthVerify  = apiUrlInternalV1 + "/auth/verify"
55
        uriInternalTenants     = apiUrlInternalV1 + "/tenants"
56
        uriInternalTenantUsers = apiUrlInternalV1 + "/tenants/#id/users"
57
        uriInternalTenantUser  = apiUrlInternalV1 + "/tenants/#id/users/#userid"
58
        uriInternalTokens      = apiUrlInternalV1 + "/tokens"
59
)
60

61
const (
62
        defaultTimeout = time.Second * 5
63
        hdrETag        = "ETag"
64
        hdrIfMatch     = "If-Match"
65
)
66

67
var (
68
        ErrAuthHeader   = errors.New("invalid or missing auth header")
69
        ErrUserNotFound = errors.New("user not found")
70
)
71

72
type UserAdmApiHandlers struct {
73
        userAdm useradm.App
74
        db      store.DataStore
75
        jwth    map[int]jwt.Handler
76
        config  Config
77
}
78

79
type Config struct {
80
        // maximum expiration time for Personal Access Token
81
        TokenMaxExpSeconds int
82
}
83

84
// return an ApiHandler for user administration and authentiacation app
85
func NewUserAdmApiHandlers(
86
        userAdm useradm.App,
87
        db store.DataStore,
88
        jwth map[int]jwt.Handler,
89
        config Config,
90
) ApiHandler {
92✔
91
        return &UserAdmApiHandlers{
92✔
92
                userAdm: userAdm,
92✔
93
                db:      db,
92✔
94
                jwth:    jwth,
92✔
95
                config:  config,
92✔
96
        }
92✔
97
}
92✔
98

99
func (i *UserAdmApiHandlers) GetApp() (rest.App, error) {
92✔
100
        routes := []*rest.Route{
92✔
101
                rest.Get(uriInternalAlive, i.AliveHandler),
92✔
102
                rest.Get(uriInternalHealth, i.HealthHandler),
92✔
103

92✔
104
                rest.Get(uriInternalAuthVerify, i.AuthVerifyHandler),
92✔
105
                rest.Post(uriInternalAuthVerify, i.AuthVerifyHandler),
92✔
106
                rest.Post(uriInternalTenants, i.CreateTenantHandler),
92✔
107
                rest.Post(uriInternalTenantUsers, i.CreateTenantUserHandler),
92✔
108
                rest.Delete(uriInternalTenantUser, i.DeleteTenantUserHandler),
92✔
109
                rest.Get(uriInternalTenantUsers, i.GetTenantUsersHandler),
92✔
110
                rest.Delete(uriInternalTokens, i.DeleteTokensHandler),
92✔
111

92✔
112
                rest.Post(uriManagementAuthLogin, i.AuthLoginHandler),
92✔
113
                rest.Post(uriManagementAuthLogout, i.AuthLogoutHandler),
92✔
114
                rest.Post(uriManagementUsers, i.AddUserHandler),
92✔
115
                rest.Get(uriManagementUsers, i.GetUsersHandler),
92✔
116
                rest.Get(uriManagementUser, i.GetUserHandler),
92✔
117
                rest.Put(uriManagementUser, i.UpdateUserHandler),
92✔
118
                rest.Delete(uriManagementUser, i.DeleteUserHandler),
92✔
119
                rest.Post(uriManagementSettings, i.SaveSettingsHandler),
92✔
120
                rest.Get(uriManagementSettings, i.GetSettingsHandler),
92✔
121
                rest.Post(uriManagementSettingsMe, i.SaveSettingsMeHandler),
92✔
122
                rest.Get(uriManagementSettingsMe, i.GetSettingsMeHandler),
92✔
123
                rest.Post(uriManagementTokens, i.IssueTokenHandler),
92✔
124
                rest.Get(uriManagementTokens, i.GetTokensHandler),
92✔
125
                rest.Delete(uriManagementToken, i.DeleteTokenHandler),
92✔
126
                // plans
92✔
127
                rest.Get(uriManagementPlans, i.GetPlansHandler),
92✔
128
                rest.Get(uriManagementPlanBinding, i.GetPlanBindingHandler),
92✔
129
        }
92✔
130

92✔
131
        app, err := rest.MakeRouter(
92✔
132
                // augment routes with OPTIONS handler
92✔
133
                routing.AutogenOptionsRoutes(routes, routing.AllowHeaderOptionsGenerator)...,
92✔
134
        )
92✔
135
        if err != nil {
92✔
136
                return nil, errors.Wrap(err, "failed to create router")
×
137
        }
×
138

139
        return app, nil
92✔
140
}
141

142
func (u *UserAdmApiHandlers) AliveHandler(w rest.ResponseWriter, r *rest.Request) {
1✔
143
        w.WriteHeader(http.StatusNoContent)
1✔
144
}
1✔
145

146
func (u *UserAdmApiHandlers) HealthHandler(w rest.ResponseWriter, r *rest.Request) {
2✔
147
        ctx := r.Context()
2✔
148
        l := log.FromContext(ctx)
2✔
149
        ctx, cancel := context.WithTimeout(ctx, defaultTimeout)
2✔
150
        defer cancel()
2✔
151

2✔
152
        err := u.userAdm.HealthCheck(ctx)
2✔
153
        if err != nil {
3✔
154
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusServiceUnavailable)
1✔
155
                return
1✔
156
        }
1✔
157
        w.WriteHeader(http.StatusNoContent)
1✔
158
}
159

160
func (u *UserAdmApiHandlers) AuthLoginHandler(w rest.ResponseWriter, r *rest.Request) {
9✔
161
        ctx := r.Context()
9✔
162

9✔
163
        l := log.FromContext(ctx)
9✔
164

9✔
165
        //parse auth header
9✔
166
        user, pass, ok := r.BasicAuth()
9✔
167
        if !ok {
10✔
168
                rest_utils.RestErrWithLog(w, r, l,
1✔
169
                        ErrAuthHeader, http.StatusUnauthorized)
1✔
170
                return
1✔
171
        }
1✔
172
        email := model.Email(strings.ToLower(user))
8✔
173

8✔
174
        options := &useradm.LoginOptions{}
8✔
175
        err := r.DecodeJsonPayload(options)
8✔
176
        if err != nil && err != rest.ErrJsonPayloadEmpty {
9✔
177
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
1✔
178
                return
1✔
179
        }
1✔
180

181
        token, err := u.userAdm.Login(ctx, email, pass, options)
7✔
182
        if err != nil {
11✔
183
                switch {
4✔
184
                case err == useradm.ErrUnauthorized || err == useradm.ErrTenantAccountSuspended:
2✔
185
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusUnauthorized)
2✔
186
                default:
2✔
187
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
2✔
188
                }
189
                return
4✔
190
        }
191

192
        raw, err := u.userAdm.SignToken(ctx, token)
3✔
193
        if err != nil {
4✔
194
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
195
                return
1✔
196
        }
1✔
197

198
        writer := w.(http.ResponseWriter)
2✔
199
        writer.Header().Set("Content-Type", "application/jwt")
2✔
200
        _, _ = writer.Write([]byte(raw))
2✔
201
}
202

203
func (u *UserAdmApiHandlers) AuthLogoutHandler(w rest.ResponseWriter, r *rest.Request) {
2✔
204
        ctx := r.Context()
2✔
205
        l := log.FromContext(ctx)
2✔
206

2✔
207
        if tokenStr, err := authz.ExtractToken(r.Request); err == nil {
4✔
208
                keyId := jwt.GetKeyId(tokenStr)
2✔
209
                if _, ok := u.jwth[keyId]; !ok {
2✔
210
                        rest_utils.RestErrWithLogInternal(w, r, l, errors.New("internal error"))
×
211
                        return
×
212
                }
×
213

214
                token, err := u.jwth[keyId].FromJWT(tokenStr)
2✔
215
                if err != nil {
2✔
216
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
×
217
                        return
×
218
                }
×
219
                if err := u.userAdm.Logout(ctx, token); err != nil {
3✔
220
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
221
                        return
1✔
222
                }
1✔
223
        }
224

225
        w.WriteHeader(http.StatusAccepted)
1✔
226
}
227

228
func (u *UserAdmApiHandlers) AuthVerifyHandler(w rest.ResponseWriter, r *rest.Request) {
9✔
229
        ctx := r.Context()
9✔
230

9✔
231
        l := log.FromContext(ctx)
9✔
232

9✔
233
        // note that the request has passed through authz - the token is valid
9✔
234
        token := authz.GetRequestToken(r.Env)
9✔
235

9✔
236
        err := u.userAdm.Verify(ctx, token)
9✔
237
        if err != nil {
15✔
238
                if err == useradm.ErrUnauthorized {
9✔
239
                        rest_utils.RestErrWithLog(w, r, l, useradm.ErrUnauthorized, http.StatusUnauthorized)
3✔
240
                } else {
6✔
241
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
3✔
242
                }
3✔
243
                return
6✔
244
        }
245

246
        w.WriteHeader(http.StatusOK)
3✔
247
}
248

249
func (u *UserAdmApiHandlers) CreateTenantUserHandler(w rest.ResponseWriter, r *rest.Request) {
10✔
250
        ctx := r.Context()
10✔
251

10✔
252
        l := log.FromContext(ctx)
10✔
253

10✔
254
        user, err := parseUserInternal(r)
10✔
255
        if err != nil {
14✔
256
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
4✔
257
                return
4✔
258
        }
4✔
259

260
        tenantId := r.PathParam("id")
6✔
261
        if tenantId == "" {
7✔
262
                rest_utils.RestErrWithLog(w, r, l, errors.New("Entity not found"), http.StatusNotFound)
1✔
263
                return
1✔
264
        }
1✔
265
        ctx = getTenantContext(ctx, tenantId)
5✔
266
        err = u.userAdm.CreateUserInternal(ctx, user)
5✔
267
        if err != nil {
6✔
268
                if err == store.ErrDuplicateEmail {
2✔
269
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusUnprocessableEntity)
1✔
270
                } else {
1✔
271
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
×
272
                }
×
273
                return
1✔
274
        }
275

276
        w.WriteHeader(http.StatusCreated)
4✔
277

278
}
279

280
func (u *UserAdmApiHandlers) AddUserHandler(w rest.ResponseWriter, r *rest.Request) {
6✔
281
        ctx := r.Context()
6✔
282

6✔
283
        l := log.FromContext(ctx)
6✔
284

6✔
285
        user, err := parseUser(r)
6✔
286
        if err != nil {
9✔
287
                if err == model.ErrPasswordTooShort {
4✔
288
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusUnprocessableEntity)
1✔
289
                } else {
3✔
290
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
2✔
291
                }
2✔
292
                return
3✔
293
        }
294

295
        err = u.userAdm.CreateUser(ctx, user)
3✔
296
        if err != nil {
4✔
297
                if err == store.ErrDuplicateEmail {
2✔
298
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusUnprocessableEntity)
1✔
299
                } else {
1✔
300
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
×
301
                }
×
302
                return
1✔
303
        }
304

305
        w.Header().Add("Location", "users/"+string(user.ID))
2✔
306
        w.WriteHeader(http.StatusCreated)
2✔
307

308
}
309

310
func (u *UserAdmApiHandlers) GetUsersHandler(w rest.ResponseWriter, r *rest.Request) {
10✔
311
        ctx := r.Context()
10✔
312

10✔
313
        l := log.FromContext(ctx)
10✔
314

10✔
315
        if err := r.ParseForm(); err != nil {
12✔
316
                err = errors.Wrap(err, "api: bad form parameters")
2✔
317
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
2✔
318
                return
2✔
319
        }
2✔
320

321
        fltr := model.UserFilter{}
8✔
322
        if err := fltr.ParseForm(r.Form); err != nil {
10✔
323
                err = errors.Wrap(err, "api: invalid form values")
2✔
324
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
2✔
325
                return
2✔
326
        }
2✔
327

328
        users, err := u.userAdm.GetUsers(ctx, fltr)
6✔
329
        if err != nil {
8✔
330
                rest_utils.RestErrWithLogInternal(w, r, l, err)
2✔
331
                return
2✔
332
        }
2✔
333

334
        _ = w.WriteJson(users)
4✔
335
}
336

337
func (u *UserAdmApiHandlers) GetTenantUsersHandler(w rest.ResponseWriter, r *rest.Request) {
5✔
338
        ctx := r.Context()
5✔
339
        ctx = identity.WithContext(ctx, &identity.Identity{
5✔
340
                Tenant: r.PathParam("id"),
5✔
341
        })
5✔
342
        r.Request = r.Request.WithContext(ctx)
5✔
343
        u.GetUsersHandler(w, r)
5✔
344
}
5✔
345

346
func (u *UserAdmApiHandlers) GetUserHandler(w rest.ResponseWriter, r *rest.Request) {
3✔
347
        ctx := r.Context()
3✔
348

3✔
349
        l := log.FromContext(ctx)
3✔
350

3✔
351
        id := r.PathParam("id")
3✔
352
        user, err := u.userAdm.GetUser(ctx, id)
3✔
353
        if err != nil {
4✔
354
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
355
                return
1✔
356
        }
1✔
357

358
        if user == nil {
3✔
359
                rest_utils.RestErrWithLog(w, r, l, ErrUserNotFound, 404)
1✔
360
                return
1✔
361
        }
1✔
362

363
        _ = w.WriteJson(user)
1✔
364
}
365

366
func (u *UserAdmApiHandlers) UpdateUserHandler(w rest.ResponseWriter, r *rest.Request) {
8✔
367
        ctx := r.Context()
8✔
368
        idty := identity.FromContext(ctx)
8✔
369
        l := log.FromContext(ctx)
8✔
370

8✔
371
        userUpdate, err := parseUserUpdate(r)
8✔
372
        if err != nil {
11✔
373
                if err == model.ErrPasswordTooShort {
4✔
374
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusUnprocessableEntity)
1✔
375
                } else {
3✔
376
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
2✔
377
                }
2✔
378
                return
3✔
379
        }
380

381
        // extract the token used to update the user
382
        if tokenStr, err := authz.ExtractToken(r.Request); err == nil {
6✔
383
                keyId := jwt.GetKeyId(tokenStr)
1✔
384
                if _, ok := u.jwth[keyId]; !ok {
1✔
385
                        rest_utils.RestErrWithLogInternal(w, r, l, errors.New("internal error"))
×
386
                        return
×
387
                }
×
388

389
                token, err := u.jwth[keyId].FromJWT(tokenStr)
1✔
390
                if err != nil {
1✔
391
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
×
392
                        return
×
393
                }
×
394
                userUpdate.Token = token
1✔
395
        }
396

397
        id := r.PathParam("id")
5✔
398
        if strings.EqualFold(id, "me") {
7✔
399
                id = idty.Subject
2✔
400
        }
2✔
401
        err = u.userAdm.UpdateUser(ctx, id, userUpdate)
5✔
402
        if err != nil {
7✔
403
                switch err {
2✔
404
                case store.ErrDuplicateEmail,
405
                        useradm.ErrCurrentPasswordMismatch,
406
                        useradm.ErrCannotModifyPassword:
1✔
407
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusUnprocessableEntity)
1✔
408
                case store.ErrUserNotFound:
×
409
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusNotFound)
×
410
                case useradm.ErrETagMismatch:
1✔
411
                        rest_utils.RestErrWithLog(w, r, l, err, http.StatusConflict)
1✔
412
                default:
×
413
                        rest_utils.RestErrWithLogInternal(w, r, l, err)
×
414
                }
415
        }
416

417
        w.WriteHeader(http.StatusNoContent)
5✔
418
}
419

420
func (u *UserAdmApiHandlers) DeleteTenantUserHandler(w rest.ResponseWriter, r *rest.Request) {
3✔
421
        ctx := r.Context()
3✔
422

3✔
423
        tenantId := r.PathParam("id")
3✔
424
        if tenantId != "" {
4✔
425
                ctx = getTenantContext(ctx, tenantId)
1✔
426
        }
1✔
427

428
        l := log.FromContext(ctx)
3✔
429
        err := u.userAdm.DeleteUser(ctx, r.PathParam("userid"))
3✔
430
        if err != nil {
4✔
431
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
432
                return
1✔
433
        }
1✔
434

435
        w.WriteHeader(http.StatusNoContent)
2✔
436
}
437

438
func (u *UserAdmApiHandlers) DeleteUserHandler(w rest.ResponseWriter, r *rest.Request) {
2✔
439
        ctx := r.Context()
2✔
440

2✔
441
        l := log.FromContext(ctx)
2✔
442

2✔
443
        err := u.userAdm.DeleteUser(ctx, r.PathParam("id"))
2✔
444
        if err != nil {
3✔
445
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
446
                return
1✔
447
        }
1✔
448

449
        w.WriteHeader(http.StatusNoContent)
1✔
450
}
451

452
func parseUser(r *rest.Request) (*model.User, error) {
6✔
453
        user := model.User{}
6✔
454

6✔
455
        //decode body
6✔
456
        err := r.DecodeJsonPayload(&user)
6✔
457
        if err != nil {
7✔
458
                return nil, errors.Wrap(err, "failed to decode request body")
1✔
459
        }
1✔
460

461
        if err := user.Validate(); err != nil {
7✔
462
                return nil, err
2✔
463
        }
2✔
464

465
        return &user, nil
3✔
466
}
467

468
func parseUserInternal(r *rest.Request) (*model.UserInternal, error) {
10✔
469
        user := model.UserInternal{}
10✔
470

10✔
471
        //decode body
10✔
472
        err := r.DecodeJsonPayload(&user)
10✔
473
        if err != nil {
11✔
474
                return nil, errors.Wrap(err, "failed to decode request body")
1✔
475
        }
1✔
476

477
        if err := user.Validate(); err != nil {
12✔
478
                return nil, err
3✔
479
        }
3✔
480

481
        return &user, nil
6✔
482
}
483

484
func parseUserUpdate(r *rest.Request) (*model.UserUpdate, error) {
8✔
485
        userUpdate := model.UserUpdate{}
8✔
486

8✔
487
        //decode body
8✔
488
        err := r.DecodeJsonPayload(&userUpdate)
8✔
489
        if err != nil {
9✔
490
                return nil, errors.Wrap(err, "failed to decode request body")
1✔
491
        }
1✔
492

493
        if err := userUpdate.Validate(); err != nil {
9✔
494
                return nil, err
2✔
495
        }
2✔
496

497
        return &userUpdate, nil
5✔
498
}
499

500
func (u *UserAdmApiHandlers) CreateTenantHandler(w rest.ResponseWriter, r *rest.Request) {
4✔
501
        ctx := r.Context()
4✔
502

4✔
503
        l := log.FromContext(ctx)
4✔
504

4✔
505
        var newTenant model.NewTenant
4✔
506

4✔
507
        if err := r.DecodeJsonPayload(&newTenant); err != nil {
5✔
508
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
1✔
509
                return
1✔
510
        }
1✔
511

512
        if err := newTenant.Validate(); err != nil {
4✔
513
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
1✔
514
                return
1✔
515
        }
1✔
516

517
        err := u.userAdm.CreateTenant(ctx, model.NewTenant{
2✔
518
                ID: newTenant.ID,
2✔
519
        })
2✔
520
        if err != nil {
3✔
521
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
522
                return
1✔
523
        }
1✔
524

525
        w.WriteHeader(http.StatusCreated)
1✔
526
}
527

528
func getTenantContext(ctx context.Context, tenantId string) context.Context {
6✔
529
        if ctx == nil {
6✔
530
                ctx = context.Background()
×
531
        }
×
532
        if tenantId != "" {
12✔
533
                id := &identity.Identity{
6✔
534
                        Tenant: tenantId,
6✔
535
                }
6✔
536

6✔
537
                ctx = identity.WithContext(ctx, id)
6✔
538
        }
6✔
539

540
        return ctx
6✔
541
}
542

543
func (u *UserAdmApiHandlers) DeleteTokensHandler(w rest.ResponseWriter, r *rest.Request) {
4✔
544

4✔
545
        ctx := r.Context()
4✔
546

4✔
547
        l := log.FromContext(ctx)
4✔
548

4✔
549
        tenantId := r.URL.Query().Get("tenant_id")
4✔
550
        if tenantId == "" {
5✔
551
                rest_utils.RestErrWithLog(
1✔
552
                        w,
1✔
553
                        r,
1✔
554
                        l,
1✔
555
                        errors.New("tenant_id must be provided"),
1✔
556
                        http.StatusBadRequest,
1✔
557
                )
1✔
558
                return
1✔
559
        }
1✔
560
        userId := r.URL.Query().Get("user_id")
3✔
561

3✔
562
        err := u.userAdm.DeleteTokens(ctx, tenantId, userId)
3✔
563
        switch err {
3✔
564
        case nil:
2✔
565
                w.WriteHeader(http.StatusNoContent)
2✔
566
        default:
1✔
567
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
568
        }
569
}
570

571
func (u *UserAdmApiHandlers) SaveSettingsHandler(w rest.ResponseWriter, r *rest.Request) {
6✔
572
        u.saveSettingsHandler(w, r, false)
6✔
573
}
6✔
574

575
func (u *UserAdmApiHandlers) SaveSettingsMeHandler(w rest.ResponseWriter, r *rest.Request) {
×
576
        u.saveSettingsHandler(w, r, true)
×
577
}
×
578

579
func (u *UserAdmApiHandlers) saveSettingsHandler(w rest.ResponseWriter, r *rest.Request, me bool) {
6✔
580
        ctx := r.Context()
6✔
581

6✔
582
        l := log.FromContext(ctx)
6✔
583

6✔
584
        settings := &model.Settings{}
6✔
585
        err := r.DecodeJsonPayload(settings)
6✔
586
        if err != nil {
7✔
587
                rest_utils.RestErrWithLog(
1✔
588
                        w,
1✔
589
                        r,
1✔
590
                        l,
1✔
591
                        errors.New("cannot parse request body as json"),
1✔
592
                        http.StatusBadRequest,
1✔
593
                )
1✔
594
                return
1✔
595
        }
1✔
596

597
        if err := settings.Validate(); err != nil {
6✔
598
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
1✔
599
                return
1✔
600
        }
1✔
601

602
        ifMatchHeader := r.Header.Get(hdrIfMatch)
4✔
603

4✔
604
        settings.ETag = uuid.NewString()
4✔
605
        if me {
4✔
606
                id := identity.FromContext(ctx)
×
607
                if id == nil {
×
608
                        rest_utils.RestErrWithLogInternal(w, r, l, errors.New("identity not present"))
×
609
                        return
×
610
                }
×
611
                err = u.db.SaveUserSettings(ctx, id.Subject, settings, ifMatchHeader)
×
612
        } else {
4✔
613
                err = u.db.SaveSettings(ctx, settings, ifMatchHeader)
4✔
614
        }
4✔
615
        if err == store.ErrETagMismatch {
5✔
616
                rest_utils.RestErrWithInfoMsg(w, r, l, err, http.StatusPreconditionFailed, err.Error())
1✔
617
                return
1✔
618
        } else if err != nil {
5✔
619
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
620
                return
1✔
621
        }
1✔
622

623
        w.WriteHeader(http.StatusCreated)
2✔
624
}
625

626
func (u *UserAdmApiHandlers) GetSettingsHandler(w rest.ResponseWriter, r *rest.Request) {
4✔
627
        u.getSettingsHandler(w, r, false)
4✔
628
}
4✔
629

630
func (u *UserAdmApiHandlers) GetSettingsMeHandler(w rest.ResponseWriter, r *rest.Request) {
×
631
        u.getSettingsHandler(w, r, true)
×
632
}
×
633

634
func (u *UserAdmApiHandlers) getSettingsHandler(w rest.ResponseWriter, r *rest.Request, me bool) {
4✔
635
        ctx := r.Context()
4✔
636

4✔
637
        l := log.FromContext(ctx)
4✔
638

4✔
639
        var settings *model.Settings
4✔
640
        var err error
4✔
641
        if me {
4✔
642
                id := identity.FromContext(ctx)
×
643
                if id == nil {
×
644
                        rest_utils.RestErrWithLogInternal(w, r, l, errors.New("identity not present"))
×
645
                        return
×
646
                }
×
647
                settings, err = u.db.GetUserSettings(ctx, id.Subject)
×
648
        } else {
4✔
649
                settings, err = u.db.GetSettings(ctx)
4✔
650
        }
4✔
651

652
        if err != nil {
5✔
653
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
654
                return
1✔
655
        } else if settings == nil {
5✔
656
                settings = &model.Settings{
1✔
657
                        Values: model.SettingsValues{},
1✔
658
                }
1✔
659
        }
1✔
660

661
        if settings.ETag != "" {
4✔
662
                w.Header().Set(hdrETag, settings.ETag)
1✔
663
        }
1✔
664
        _ = w.WriteJson(settings)
3✔
665
}
666

667
func (u *UserAdmApiHandlers) IssueTokenHandler(w rest.ResponseWriter, r *rest.Request) {
6✔
668
        ctx := r.Context()
6✔
669

6✔
670
        l := log.FromContext(ctx)
6✔
671

6✔
672
        var tokenRequest model.TokenRequest
6✔
673

6✔
674
        if err := r.DecodeJsonPayload(&tokenRequest); err != nil {
6✔
675
                rest_utils.RestErrWithLog(
×
676
                        w,
×
677
                        r,
×
678
                        l,
×
679
                        errors.New("cannot parse request body as json"),
×
680
                        http.StatusBadRequest,
×
681
                )
×
682
                return
×
683
        }
×
684
        if err := tokenRequest.Validate(u.config.TokenMaxExpSeconds); err != nil {
8✔
685
                rest_utils.RestErrWithLog(
2✔
686
                        w,
2✔
687
                        r,
2✔
688
                        l,
2✔
689
                        err,
2✔
690
                        http.StatusBadRequest,
2✔
691
                )
2✔
692
                return
2✔
693
        }
2✔
694

695
        token, err := u.userAdm.IssuePersonalAccessToken(ctx, &tokenRequest)
4✔
696
        switch err {
4✔
697
        case nil:
2✔
698
                writer := w.(http.ResponseWriter)
2✔
699
                writer.Header().Set("Content-Type", "application/jwt")
2✔
700
                _, _ = writer.Write([]byte(token))
2✔
701
        case useradm.ErrTooManyTokens:
1✔
702
                rest_utils.RestErrWithLog(
1✔
703
                        w,
1✔
704
                        r,
1✔
705
                        l,
1✔
706
                        err,
1✔
707
                        http.StatusUnprocessableEntity,
1✔
708
                )
1✔
709
        case useradm.ErrDuplicateTokenName:
1✔
710
                rest_utils.RestErrWithLog(
1✔
711
                        w,
1✔
712
                        r,
1✔
713
                        l,
1✔
714
                        err,
1✔
715
                        http.StatusConflict,
1✔
716
                )
1✔
717
        default:
×
718
                rest_utils.RestErrWithLogInternal(w, r, l, err)
×
719
        }
720
}
721

722
func (u *UserAdmApiHandlers) GetTokensHandler(w rest.ResponseWriter, r *rest.Request) {
2✔
723
        ctx := r.Context()
2✔
724
        l := log.FromContext(ctx)
2✔
725
        id := identity.FromContext(ctx)
2✔
726
        if id == nil {
2✔
727
                rest_utils.RestErrWithLogInternal(w, r, l, errors.New("identity not present"))
×
728
                return
×
729
        }
×
730

731
        tokens, err := u.userAdm.GetPersonalAccessTokens(ctx, id.Subject)
2✔
732
        if err != nil {
3✔
733
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
734
                return
1✔
735
        }
1✔
736

737
        _ = w.WriteJson(tokens)
1✔
738
}
739

740
func (u *UserAdmApiHandlers) DeleteTokenHandler(w rest.ResponseWriter, r *rest.Request) {
×
741
        ctx := r.Context()
×
742

×
743
        l := log.FromContext(ctx)
×
744

×
745
        err := u.userAdm.DeleteToken(ctx, r.PathParam("id"))
×
746
        if err != nil {
×
747
                rest_utils.RestErrWithLogInternal(w, r, l, err)
×
748
                return
×
749
        }
×
750

751
        w.WriteHeader(http.StatusNoContent)
×
752
}
753

754
// plans and plan binding
755

756
func (u *UserAdmApiHandlers) GetPlansHandler(w rest.ResponseWriter, r *rest.Request) {
5✔
757
        ctx := r.Context()
5✔
758
        l := log.FromContext(ctx)
5✔
759
        page, perPage, err := rest_utils.ParsePagination(r)
5✔
760
        if err != nil {
7✔
761
                rest_utils.RestErrWithLog(w, r, l, err, http.StatusBadRequest)
2✔
762
                return
2✔
763
        }
2✔
764

765
        plans := u.userAdm.GetPlans(ctx, int((page-1)*perPage), int(perPage))
3✔
766
        if plans == nil {
4✔
767
                plans = []model.Plan{}
1✔
768
        }
1✔
769

770
        _ = w.WriteJson(plans)
3✔
771
}
772

773
func (u *UserAdmApiHandlers) GetPlanBindingHandler(w rest.ResponseWriter, r *rest.Request) {
2✔
774
        ctx := r.Context()
2✔
775
        l := log.FromContext(ctx)
2✔
776

2✔
777
        planBinding, err := u.userAdm.GetPlanBinding(ctx)
2✔
778
        if err != nil {
3✔
779
                rest_utils.RestErrWithLogInternal(w, r, l, err)
1✔
780
                return
1✔
781
        }
1✔
782

783
        _ = w.WriteJson(planBinding)
1✔
784
}
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc