mac
76 lines
1.9 KiB
Go
76 lines
1.9 KiB
Go
package handler
|
|
|
|
import (
|
|
"net/http"
|
|
"strconv"
|
|
|
|
"github.com/1024XEngineer/xinfra/server/internal/model"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
type UserHandler struct {
|
|
db *gorm.DB
|
|
}
|
|
|
|
func NewUserHandler(db *gorm.DB) *UserHandler {
|
|
return &UserHandler{db: db}
|
|
}
|
|
|
|
func (h *UserHandler) Me(c *gin.Context) {
|
|
claims, ok := CurrentClaims(c)
|
|
if !ok {
|
|
c.JSON(http.StatusUnauthorized, gin.H{"error": "missing current user"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"id": claims.UserID,
|
|
"username": claims.Username,
|
|
"email": claims.Email,
|
|
"is_admin": claims.IsAdmin,
|
|
})
|
|
}
|
|
|
|
func (h *UserHandler) List(c *gin.Context) {
|
|
claims, ok := CurrentClaims(c)
|
|
if !ok {
|
|
c.JSON(http.StatusUnauthorized, gin.H{"error": "missing current user"})
|
|
return
|
|
}
|
|
|
|
query := h.db.Model(&model.User{}).Where("users.deleted_at IS NULL")
|
|
if businessLineID := c.Query("business_line_id"); businessLineID != "" {
|
|
if !claims.IsAdmin {
|
|
id, err := strconv.ParseUint(businessLineID, 10, 64)
|
|
if err != nil || id == 0 {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "invalid business line id"})
|
|
return
|
|
}
|
|
var binding model.BusinessLineUser
|
|
if err := h.db.Where("business_line_id = ? AND user_id = ?", id, claims.UserID).First(&binding).Error; err != nil {
|
|
c.JSON(http.StatusForbidden, gin.H{"error": "current user is not in business line"})
|
|
return
|
|
}
|
|
}
|
|
query = query.
|
|
Joins("JOIN business_line_users ON business_line_users.user_id = users.id").
|
|
Where("business_line_users.business_line_id = ?", businessLineID)
|
|
}
|
|
|
|
var users []model.User
|
|
if err := query.Order("users.id ASC").Find(&users).Error; err != nil {
|
|
c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
|
|
return
|
|
}
|
|
|
|
items := make([]gin.H, 0, len(users))
|
|
for _, user := range users {
|
|
items = append(items, gin.H{
|
|
"uid": user.ID,
|
|
"username": user.Username,
|
|
})
|
|
}
|
|
c.JSON(http.StatusOK, gin.H{"items": items})
|
|
}
|