IIC2173-2015-2-Grupo2/news-api

package controllers

import (
    "net/http"

    "github.com/IIC2173-2015-2-Grupo2/news-api/models"
    "github.com/IIC2173-2015-2-Grupo2/news-api/util"
    "github.com/gin-gonic/gin"
)

/*
SessionController CRUD
*/
type SessionController struct {
    PgBase
    SecretHash string
}

/*
Create account
*/
func (n *SessionController) Create(c *gin.Context) {
    username, password := c.PostForm("username"), c.PostForm("password")
    name, email := c.PostForm("email"), c.PostForm("name")

    if len(username) == 0 || len(password) == 0 || len(name) == 0 || len(email) == 0 {
        c.JSON(http.StatusBadRequest, gin.H{"error": "missing fields"})

    } else if duplicated, err := models.FindUserByUsername(n.DB, username); err != nil {
        c.JSON(http.StatusInternalServerError, gin.H{"error": err})

    } else if duplicated != nil {
        c.JSON(http.StatusUnauthorized, gin.H{"error": "username already exists"})

    } else if hashpassword, err := util.HashPass(password); err != nil {
        c.JSON(http.StatusInternalServerError, gin.H{"error": err})

    } else {
        user := models.User{
            Name:     name,
            Username: username,
            Email:    email,
            Password: hashpassword,
        }

        if _, err := user.Save(n.DB); err != nil {
            c.JSON(http.StatusInternalServerError, gin.H{"error": err})

        } else {
            n.Log("Session", "Create")
            n.Token(c, &user)
        }
    }
}

/*
Authorize user to access to private resources
*/
func (n *SessionController) Authorize(c *gin.Context) {
    username, password := c.PostForm("username"), c.PostForm("password")

    if len(username) == 0 || len(password) == 0 {
        c.JSON(http.StatusBadRequest, gin.H{"error": "missing fields"})

    } else if user, err := models.FindUserByUsername(n.DB, username); err != nil {
        c.JSON(http.StatusUnauthorized, gin.H{"error": "username not found"})

    } else if err := util.ValidatePass(password, user.Password); err != nil {
        c.JSON(http.StatusUnauthorized, gin.H{"error": "invalid password"})

    } else {
        n.Log("Session", "Auth Token")
        n.Token(c, user)
    }
}

/*
Token creation for an user
*/
func (n *SessionController) Token(c *gin.Context, user *models.User) {
    claims := map[string]interface{}{
        "ID": user.ID,
    }

    if token, err := util.Token(n.SecretHash, claims); err != nil {
        c.JSON(http.StatusInternalServerError, gin.H{"error": err})

    } else {
        c.JSON(http.StatusAccepted, gin.H{"token": token})
    }
}