package controllers
import (
"fmt"
"html"
"log"
"net/http"
"smt/models"
"strings"
"github.com/gin-gonic/gin"
)
type SafeInput struct {
SafeId int `db:"SafeId" json:"safeId"`
SafeName string `db:"SafeName" json:"safeName"`
}
// GetSafesHandler provides a list of all safes that a user has access to
func GetSafesHandler(c *gin.Context) {
var UserId int
if val, ok := c.Get("user-id"); !ok {
c.JSON(http.StatusBadRequest, gin.H{"error": "error determining user"})
return
} else {
UserId = val.(int)
}
safes, err := models.SafeListAllowed(UserId)
if err != nil {
errString := fmt.Sprintf("error retrieving safes : '%s'", err)
log.Printf("GetSafesHandler %s\n", errString)
c.JSON(http.StatusBadRequest, gin.H{"error": errString})
return
}
c.JSON(http.StatusOK, gin.H{"message": "success", "data": safes})
}
// GetAllSafesHandler provides an admin user a list of all safes that exist in the database
func GetAllSafesHandler(c *gin.Context) {
safes, err := models.SafeList()
if err != nil {
errString := fmt.Sprintf("error retrieving safes : '%s'", err)
log.Printf("GetSafesHandler %s\n", errString)
c.JSON(http.StatusBadRequest, gin.H{"error": errString})
return
}
c.JSON(http.StatusOK, gin.H{"message": "success", "data": safes})
}
func AddSafeHandler(c *gin.Context) {
var input SafeInput
if err := c.ShouldBindJSON(&input); err != nil {
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
return
}
if len(input.SafeName) == 0 {
c.JSON(http.StatusBadRequest, gin.H{"error": "no safe name specified"})
return
}
s := models.Safe{SafeId: input.SafeId, SafeName: input.SafeName}
//remove leading/trailing spaces in safe name
s.SafeName = html.EscapeString(strings.TrimSpace(s.SafeName))
// Check if safe already exists
testSafe, _ := models.SafeGetByName(s.SafeName)
log.Printf("AddSafeHandler checking if safe '%s' already exists\n", s.SafeName)
if (models.Safe{} == testSafe) {
log.Printf("AddSafeHandler confirmed no existing safe name\n")
} else {
errorString := fmt.Sprintf("attempt to register conflicting safe '%s'", s.SafeName)
log.Printf("Register error : '%s'\n", errorString)
c.JSON(http.StatusBadRequest, gin.H{"error": errorString})
return
}
_, err := s.SafeAdd()
if err != nil {
errString := fmt.Sprintf("error creating safe : '%s'", err)
log.Printf("AddSafeHandler %s\n", errString)
c.JSON(http.StatusBadRequest, gin.H{"error": errString})
return
}
c.JSON(http.StatusOK, gin.H{"message": "safe creation success", "data": s})
}
func DeleteSafeHandler(c *gin.Context) {
var input SafeInput
if err := c.ShouldBindJSON(&input); err != nil {
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
return
}
// Input validation
if input.SafeId == 0 && len(input.SafeName) == 0 {
c.JSON(http.StatusBadRequest, gin.H{"error": "no safe name or id specified"})
return
}
s := models.Safe{SafeId: input.SafeId, SafeName: input.SafeName}
//remove leading/trailing spaces in safe name
s.SafeName = html.EscapeString(strings.TrimSpace(s.SafeName))
// Confirm safe exists
testSafe, _ := models.SafeGetByName(s.SafeName)
log.Printf("DeleteSafeHandler confirming group '%s' exists\n", s.SafeName)
if (models.Safe{} == testSafe) {
errString := fmt.Sprintf("attempt to delete non-existing safe '%s'", s.SafeName)
log.Printf("DeleteSafeHandler %s\n", errString)
c.JSON(http.StatusBadRequest, gin.H{"error": errString})
return
} else {
err := s.SafeDelete()
if err != nil {
errString := fmt.Sprintf("error deleting safe : '%s'", err)
log.Printf("DeleteSafeHandler %s\n", errString)
c.JSON(http.StatusBadRequest, gin.H{"error": errString})
return
}
c.JSON(http.StatusOK, gin.H{"message": "safe deletion success"})
}
}