auth-api/src/db/accounts.go

package db

import (
	"context"
	"errors"
	"strings"

	"github.com/google/uuid"
)

// AccountCreate writes a user to database
func (d Db) AccountCreate(input AccountCreateInput) (CreatedAccount, error) {
	accountSQL := "INSERT INTO accounts (id, name, \"apiKey\", password) VALUES($1,$2,$3,$4);"

	_, err := d.DbPool.Exec(context.Background(), accountSQL, input.ID, input.Name, input.APIKey, input.Password)
	if err != nil {
		if strings.HasPrefix(err.Error(), "ERROR: duplicate key") {
			d.Log.Debug("Duplicate name in accounts database", "name", input.Name)
		} else {
			d.Log.Error("Database error when trying to add account", "err", err.Error())
		}

		return CreatedAccount{}, err
	}

	d.Log.Info("Added account to database", "id", input.ID, "name", input.Name)

	accountFieldsSQL := "INSERT INTO \"accountsFields\" (id, \"accountId\", name, value) VALUES($1,$2,$3,$4);"
	for _, field := range input.Fields {
		newFieldID, uuidErr := uuid.NewRandom()
		if uuidErr != nil {
			d.Log.Error("Could not create new Uuid", "err", uuidErr.Error())
			return CreatedAccount{}, uuidErr
		}

		_, err := d.DbPool.Exec(context.Background(), accountFieldsSQL, newFieldID, input.ID, field.Name, field.Values)
		if err != nil {
			//if strings.HasPrefix(err.Error(), "ERROR: duplicate key") {
			d.Log.Error("Database error when trying to add account field", "err", err.Error(), "accountID", input.ID, "fieldName", field.Name, "fieldvalues", field.Values)
			// }
		}

		d.Log.Debug("Added account field", "accountID", input.ID, "fieldName", field.Name, "fieldValues", field.Values)
	}

	return CreatedAccount{
		ID:     input.ID,
		Name:   input.Name,
		APIKey: input.APIKey,
	}, nil
}

func (d Db) AccountDel(accountID string) error {
	d.Log.Info("Trying to delete account", "accountID", accountID)

	_, renewalTokensErr := d.DbPool.Exec(context.Background(), "DELETE FROM \"renewalTokens\" WHERE \"accountId\" = $1;", accountID)
	if renewalTokensErr != nil {
		d.Log.Error("Could not remove renewal tokens for account", "err", renewalTokensErr.Error(), "accountID", accountID)
		return renewalTokensErr
	}

	_, fieldsErr := d.DbPool.Exec(context.Background(), "DELETE FROM \"accountsFields\" WHERE \"accountId\" = $1;", accountID)
	if fieldsErr != nil {
		d.Log.Error("Could not remove account fields", "err", fieldsErr.Error(), "accountID", accountID)
		return fieldsErr
	}

	res, err := d.DbPool.Exec(context.Background(), "DELETE FROM accounts WHERE id = $1", accountID)
	if err != nil {
		d.Log.Error("Could not remove account", "err", err.Error(), "accountID", accountID)
		return err
	}

	if string(res) == "DELETE 0" {
		d.Log.Info("Tried to delete account, but none exists", "accountID", accountID)
		err := errors.New("No account found for given accountID")
		return err
	}

	return nil
}

// AccountGet fetches an account from the database
func (d Db) AccountGet(accountID string, APIKey string, Name string) (Account, error) {
	d.Log.Debug("Trying to get account", "accountID", accountID, "len(APIKey)", len(APIKey))

	var account Account
	var searchParam string
	accountSQL := "SELECT id, created, name, \"password\" FROM accounts WHERE "
	if accountID != "" {
		accountSQL = accountSQL + "id = $1"
		searchParam = accountID
	} else if APIKey != "" {
		accountSQL = accountSQL + "\"apiKey\" = $1"
		searchParam = APIKey
	} else if Name != "" {
		accountSQL = accountSQL + "name = $1"
		searchParam = Name
	}

	accountErr := d.DbPool.QueryRow(context.Background(), accountSQL, searchParam).Scan(&account.ID, &account.Created, &account.Name, &account.Password)
	if accountErr != nil {
		if accountErr.Error() == "no rows in result set" {
			d.Log.Debug("No account found", "accountID", accountID, "APIKey", len(APIKey))
			return Account{}, accountErr
		}

		d.Log.Error("Database error when fetching account", "err", accountErr.Error(), "accountID", accountID, "APIKey", len(APIKey))
		return Account{}, accountErr
	}

	fieldsSQL := "SELECT name, value FROM \"accountsFields\" WHERE \"accountId\" = $1"
	rows, fieldsErr := d.DbPool.Query(context.Background(), fieldsSQL, account.ID)
	if fieldsErr != nil {
		d.Log.Error("Database error when fetching account fields", "err", accountErr.Error(), "accountID", accountID, "APIKey", len(APIKey))
		return Account{}, fieldsErr
	}

	account.Fields = make(map[string][]string)
	for rows.Next() {
		var name string
		var value []string
		err := rows.Scan(&name, &value)
		if err != nil {
			d.Log.Error("Could not get name or value from database row", "err", err.Error(), "accountID", accountID, "APIKey", len(APIKey))
			return Account{}, err
		}
		account.Fields[name] = value
	}

	return account, nil
}

func (d Db) AccountUpdateFields(accountID string, fields []AccountCreateInputFields) (Account, error) {
	// Begin database transaction
	conn, err := d.DbPool.Acquire(context.Background())
	if err != nil {
		d.Log.Error("Could not acquire database connection", "err", err.Error(), "accountID", accountID)
		return Account{}, err
	}

	tx, err := conn.Begin(context.Background())
	if err != nil {
		d.Log.Error("Could not begin database transaction", "err", err.Error(), "accountID", accountID)
		return Account{}, err
	}

	// Rollback is safe to call even if the tx is already closed, so if
	// the tx commits successfully, this is a no-op
	defer tx.Rollback(context.Background())

	_, err = tx.Exec(context.Background(), "DELETE FROM \"accountsFields\" WHERE \"accountId\" = $1;", accountID)
	if err != nil {
		d.Log.Error("Could not delete previous fields", "err", err.Error(), "accountID", accountID)
		return Account{}, err
	}

	accountFieldsSQL := "INSERT INTO \"accountsFields\" (id, \"accountId\", name, value) VALUES($1,$2,$3,$4);"
	for _, field := range fields {
		newFieldID, err := uuid.NewRandom()
		if err != nil {
			d.Log.Error("Could not create new Uuid", "err", err.Error())
			return Account{}, err
		}

		_, err = tx.Exec(context.Background(), accountFieldsSQL, newFieldID, accountID, field.Name, field.Values)
		if err != nil {
			d.Log.Error("Database error when trying to add account field", "err", err.Error(), "accountID", accountID, "fieldName", field.Name, "fieldvalues", field.Values)
		}

		d.Log.Debug("Added account field", "accountID", accountID, "fieldName", field.Name, "fieldValues", field.Values)
	}

	err = tx.Commit(context.Background())
	if err != nil {
		d.Log.Error("Database error when tying to commit", "err", err.Error())
		return Account{}, err
	}

	return d.AccountGet(accountID, "", "")
}