porter/internal/forms/user.go

package forms

import (
	"strings"

	"github.com/porter-dev/porter/internal/kubernetes"
	"github.com/porter-dev/porter/internal/models"
	"github.com/porter-dev/porter/internal/repository"
	"golang.org/x/crypto/bcrypt"
	"gorm.io/gorm"
)

// WriteUserForm is a generic form for write operations to the User model
type WriteUserForm interface {
	ToUser(repo repository.UserRepository) (*models.User, error)
}

// CreateUserForm represents the accepted values for creating a user
type CreateUserForm struct {
	WriteUserForm
	Email    string `json:"email" form:"required,max=255,email"`
	Password string `json:"password" form:"required,max=255"`
}

// ToUser converts a CreateUserForm to models.User
func (cuf *CreateUserForm) ToUser(_ repository.UserRepository) (*models.User, error) {
	hashed, err := bcrypt.GenerateFromPassword([]byte(cuf.Password), 8)

	if err != nil {
		return nil, err
	}

	return &models.User{
		Email:    cuf.Email,
		Password: string(hashed),
	}, nil
}

// LoginUserForm represents the accepted values for logging a user in
type LoginUserForm struct {
	WriteUserForm
	ID       uint   `form:"required"`
	Email    string `json:"email" form:"required,max=255,email"`
	Password string `json:"password" form:"required,max=255"`
}

// ToUser converts a LoginUserForm to models.User
func (luf *LoginUserForm) ToUser(_ repository.UserRepository) (*models.User, error) {
	hashed, err := bcrypt.GenerateFromPassword([]byte(luf.Password), 8)

	if err != nil {
		return nil, err
	}

	return &models.User{
		Email:    luf.Email,
		Password: string(hashed),
	}, nil
}

// UpdateUserForm represents the accepted values for updating a user
//
// ID is a query parameter, the other two are sent in JSON body
type UpdateUserForm struct {
	WriteUserForm
	ID              uint     `form:"required"`
	RawKubeConfig   string   `json:"rawKubeConfig,omitempty"`
	AllowedContexts []string `json:"allowedContexts"`
}

// ToUser converts an UpdateUserForm to models.User by parsing the kubeconfig
// and the allowed clusters to generate a list of ClusterConfigs.
func (uuf *UpdateUserForm) ToUser(repo repository.UserRepository) (*models.User, error) {
	rawBytes := []byte(uuf.RawKubeConfig)
	contexts := uuf.AllowedContexts

	savedUser, err := repo.ReadUser(uuf.ID)

	if err != nil {
		return nil, err
	}

	// if the rawKubeConfig is empty, query the DB for a non-empty one
	if uuf.RawKubeConfig == "" {
		rawBytes = savedUser.RawKubeConfig
	}

	// if the allowedContexts is nil, query the DB for a non-nil one
	if uuf.AllowedContexts == nil {
		contexts = savedUser.ContextToSlice()
	}

	if len(rawBytes) > 0 {
		// validate the kubeconfig
		_contexts, err := kubernetes.GetContextsFromBytes(rawBytes, contexts)

		if err != nil {
			return nil, err
		}

		contexts = make([]string, 0)

		// ensure only joined contexts get written
		for _, context := range _contexts {
			if context.Selected {
				contexts = append(contexts, context.Name)
			}
		}
	}

	contextsJoin := strings.Join(contexts, ",")

	return &models.User{
		Model: gorm.Model{
			ID: uuf.ID,
		},
		Contexts:      contextsJoin,
		RawKubeConfig: rawBytes,
	}, nil
}

// DeleteUserForm represents the accepted values for deleting a user
type DeleteUserForm struct {
	WriteUserForm
	ID       uint   `form:"required"`
	Password string `json:"password" form:"required,max=255"`
}

// ToUser converts a DeleteUserForm to models.User using the user ID
func (uuf *DeleteUserForm) ToUser(_ repository.UserRepository) (*models.User, error) {
	return &models.User{
		Model: gorm.Model{
			ID: uuf.ID,
		},
	}, nil
}