Add user management to api

api/graphql/resolvers/user.go

@@ -3,6 +3,7 @@ package resolvers
 import (
 	"context"
 	"errors"
+	"log"
 
 	"github.com/viktorstrate/photoview/api/graphql/auth"
 	"github.com/viktorstrate/photoview/api/graphql/models"
@@ -81,7 +82,7 @@ func (r *mutationResolver) RegisterUser(ctx context.Context, username string, pa
 		return nil, err
 	}
 
-	user, err := models.RegisterUser(tx, username, password, rootPath)
+	user, err := models.RegisterUser(tx, username, &password, rootPath, false)
 	if err != nil {
 		tx.Rollback()
 		return &models.AuthorizeResult{
@@ -127,7 +128,7 @@ func (r *mutationResolver) InitialSetupWizard(ctx context.Context, username stri
 		return nil, err
 	}
 
-	user, err := models.RegisterUser(tx, username, password, rootPath)
+	user, err := models.RegisterUser(tx, username, &password, rootPath, true)
 	if err != nil {
 		tx.Rollback()
 		return &models.AuthorizeResult{
@@ -136,11 +137,6 @@ func (r *mutationResolver) InitialSetupWizard(ctx context.Context, username stri
 		}, nil
 	}
 
-	if _, err := tx.Exec("UPDATE user SET admin = true WHERE user_id = ?", user.UserID); err != nil {
-		tx.Rollback()
-		return nil, err
-	}
-
 	token, err := user.GenerateAccessToken(tx)
 	if err != nil {
 		tx.Rollback()
@@ -157,3 +153,108 @@ func (r *mutationResolver) InitialSetupWizard(ctx context.Context, username stri
 		Token:   &token.Value,
 	}, nil
 }
+
+// Admin queries
+func (r *mutationResolver) UpdateUser(ctx context.Context, id int, username *string, rootPath *string, admin *bool) (*models.User, error) {
+
+	user_rows, err := r.Database.Query("SELECT * FROM user WHERE user_id = ?", id)
+	if err != nil {
+		return nil, err
+	}
+	if user_rows.Next() == false {
+		return nil, errors.New("user not found")
+	}
+	user_rows.Close()
+
+	update_str := ""
+	update_args := make([]interface{}, 0)
+
+	if username != nil {
+		update_str += "username = ?, "
+		update_args = append(update_args, username)
+	}
+	if rootPath != nil {
+		if !models.ValidRootPath(*rootPath) {
+			return nil, errors.New("invalid root path")
+		}
+
+		update_str += "root_path = ?, "
+		update_args = append(update_args, rootPath)
+	}
+	if admin != nil {
+		update_str += "admin = ?, "
+		update_args = append(update_args, admin)
+	}
+
+	if len(update_str) == 0 {
+		return nil, errors.New("no updates requested")
+	}
+
+	update_str = update_str[:len(update_str)-2]
+	log.Printf("Updating user with update string: %s\n", update_str)
+
+	update_args = append(update_args, id)
+
+	res, err := r.Database.Exec("UPDATE user SET "+update_str+" WHERE user_id = ?", update_args...)
+	if err != nil {
+		return nil, err
+	}
+	rows_aff, err := res.RowsAffected()
+	if err != nil {
+		return nil, err
+	}
+	if rows_aff == 0 {
+		return nil, errors.New("no users were updated")
+	}
+
+	row := r.Database.QueryRow("SELECT * FROM user WHERE user_id = ?", id)
+	user, err := models.NewUserFromRow(row)
+	if err != nil {
+		return nil, err
+	}
+
+	return user, nil
+}
+
+func (r *mutationResolver) CreateUser(ctx context.Context, username string, rootPath string, password *string, admin bool) (*models.User, error) {
+	tx, err := r.Database.Begin()
+	if err != nil {
+		return nil, err
+	}
+
+	user, err := models.RegisterUser(tx, username, password, rootPath, admin)
+	if err != nil {
+		tx.Rollback()
+		return nil, err
+	}
+
+	if err := tx.Commit(); err != nil {
+		return nil, err
+	}
+
+	return user, nil
+}
+
+func (r *mutationResolver) DeleteUser(ctx context.Context, id int) (*models.User, error) {
+
+	row := r.Database.QueryRow("SELECT * FROM user WHERE user_id = ?", id)
+	user, err := models.NewUserFromRow(row)
+	if err != nil {
+		return nil, err
+	}
+
+	res, err := r.Database.Exec("DELETE FROM user WHERE user_id = ?", id)
+	if err != nil {
+		return nil, err
+	}
+
+	rows, err := res.RowsAffected()
+	if err != nil {
+		return nil, err
+	}
+	if rows == 0 {
+		return nil, errors.New("no users deleted")
+	}
+
+	return user, nil
+}