package controllers import ( "fmt" "html" "log" "net/http" "smt/models" "strings" "github.com/gin-gonic/gin" ) type SafeInput struct { SafeId int `db:"SafeId" json:"safeId"` SafeName string `db:"SafeName" json:"safeName"` } // GetSafesHandler provides a list of all safes that a user has access to func GetSafesHandler(c *gin.Context) { var UserId int if val, ok := c.Get("user-id"); !ok { c.JSON(http.StatusBadRequest, gin.H{"error": "error determining user"}) return } else { UserId = val.(int) } safes, err := models.SafeListAllowed(UserId) if err != nil { errString := fmt.Sprintf("error retrieving safes : '%s'", err) log.Printf("GetSafesHandler %s\n", errString) c.JSON(http.StatusBadRequest, gin.H{"error": errString}) return } c.JSON(http.StatusOK, gin.H{"message": "success", "data": safes}) } // GetAllSafesHandler provides an admin user a list of all safes that exist in the database func GetAllSafesHandler(c *gin.Context) { safes, err := models.SafeList() if err != nil { errString := fmt.Sprintf("error retrieving safes : '%s'", err) log.Printf("GetSafesHandler %s\n", errString) c.JSON(http.StatusBadRequest, gin.H{"error": errString}) return } c.JSON(http.StatusOK, gin.H{"message": "success", "data": safes}) } func AddSafeHandler(c *gin.Context) { var input SafeInput if err := c.ShouldBindJSON(&input); err != nil { c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()}) return } if len(input.SafeName) == 0 { c.JSON(http.StatusBadRequest, gin.H{"error": "no safe name specified"}) return } s := models.Safe{SafeId: input.SafeId, SafeName: input.SafeName} //remove leading/trailing spaces in safe name s.SafeName = html.EscapeString(strings.TrimSpace(s.SafeName)) // Check if safe already exists testSafe, _ := models.SafeGetByName(s.SafeName) log.Printf("AddSafeHandler checking if safe '%s' already exists\n", s.SafeName) if (models.Safe{} == testSafe) { log.Printf("AddSafeHandler confirmed no existing safe name\n") } else { errorString := fmt.Sprintf("attempt to register conflicting safe '%s'", s.SafeName) log.Printf("Register error : '%s'\n", errorString) c.JSON(http.StatusBadRequest, gin.H{"error": errorString}) return } _, err := s.SafeAdd() if err != nil { errString := fmt.Sprintf("error creating safe : '%s'", err) log.Printf("AddSafeHandler %s\n", errString) c.JSON(http.StatusBadRequest, gin.H{"error": errString}) return } c.JSON(http.StatusOK, gin.H{"message": "safe creation success"}) } func DeleteSafeHandler(c *gin.Context) { var input SafeInput if err := c.ShouldBindJSON(&input); err != nil { c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()}) return } // Input validation if input.SafeId == 0 && len(input.SafeName) == 0 { c.JSON(http.StatusBadRequest, gin.H{"error": "no safe name or id specified"}) return } s := models.Safe{SafeId: input.SafeId, SafeName: input.SafeName} //remove leading/trailing spaces in safe name s.SafeName = html.EscapeString(strings.TrimSpace(s.SafeName)) // Confirm safe exists testSafe, _ := models.SafeGetByName(s.SafeName) log.Printf("DeleteSafeHandler confirming group '%s' exists\n", s.SafeName) if (models.Safe{} == testSafe) { errString := fmt.Sprintf("attempt to delete non-existing safe '%s'", s.SafeName) log.Printf("DeleteSafeHandler %s\n", errString) c.JSON(http.StatusBadRequest, gin.H{"error": errString}) return } else { err := s.SafeDelete() if err != nil { errString := fmt.Sprintf("error deleting safe : '%s'", err) log.Printf("DeleteSafeHandler %s\n", errString) c.JSON(http.StatusBadRequest, gin.H{"error": errString}) return } c.JSON(http.StatusOK, gin.H{"message": "safe deletion success"}) } }