76 lines
1.6 KiB
Go
76 lines
1.6 KiB
Go
package web
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
|
|
"github.com/go-chi/chi/v5"
|
|
|
|
"plumber/internal/store"
|
|
)
|
|
|
|
type adminUsersPage struct {
|
|
page
|
|
Users []store.User
|
|
Error string
|
|
}
|
|
|
|
func (s *Server) requireAdmin(w http.ResponseWriter, r *http.Request) *store.User {
|
|
u := currentUser(r)
|
|
if !u.Admin() {
|
|
http.Error(w, "forbidden", http.StatusForbidden)
|
|
return nil
|
|
}
|
|
return u
|
|
}
|
|
|
|
func (s *Server) handleAdminUsers(w http.ResponseWriter, r *http.Request) {
|
|
if s.requireAdmin(w, r) == nil {
|
|
return
|
|
}
|
|
users, err := store.ListUsers(r.Context(), s.db)
|
|
if err != nil {
|
|
http.Error(w, "could not load users", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
s.exec(w, "admin-users", adminUsersPage{
|
|
page: s.basePage(r, "Users"),
|
|
Users: users,
|
|
})
|
|
}
|
|
|
|
func (s *Server) handleAdminSetRole(w http.ResponseWriter, r *http.Request) {
|
|
if !s.requireCSRF(w, r) {
|
|
return
|
|
}
|
|
if s.requireAdmin(w, r) == nil {
|
|
return
|
|
}
|
|
id := chi.URLParam(r, "id")
|
|
role := store.Role(r.PostFormValue("role"))
|
|
u, err := store.UserByID(r.Context(), s.db, id)
|
|
if err != nil {
|
|
http.Error(w, "could not update role", http.StatusBadRequest)
|
|
return
|
|
}
|
|
err = u.SetRole(r.Context(), role)
|
|
if errors.Is(err, store.ErrLastAdmin) {
|
|
users, listErr := store.ListUsers(r.Context(), s.db)
|
|
if listErr != nil {
|
|
http.Error(w, "could not demote last admin", http.StatusBadRequest)
|
|
return
|
|
}
|
|
s.exec(w, "admin-users", adminUsersPage{
|
|
page: s.basePage(r, "Users"),
|
|
Users: users,
|
|
Error: "Cannot demote the last admin.",
|
|
})
|
|
return
|
|
}
|
|
if err != nil {
|
|
http.Error(w, "could not update role", http.StatusBadRequest)
|
|
return
|
|
}
|
|
http.Redirect(w, r, "/admin/users", http.StatusSeeOther)
|
|
}
|