118 lines
2.9 KiB
Go
118 lines
2.9 KiB
Go
package db
|
|
|
|
import (
|
|
"context"
|
|
"crypto/rand"
|
|
"encoding/base64"
|
|
"time"
|
|
|
|
"codeberg.org/pronounscc/pronouns.cc/backend/log"
|
|
"emperror.dev/errors"
|
|
"github.com/georgysavva/scany/v2/pgxscan"
|
|
"github.com/jackc/pgx/v5"
|
|
"github.com/rs/xid"
|
|
)
|
|
|
|
type Invite struct {
|
|
UserID xid.ID
|
|
Code string
|
|
Created time.Time
|
|
Used bool
|
|
}
|
|
|
|
func (db *DB) UserInvites(ctx context.Context, userID xid.ID) (is []Invite, err error) {
|
|
sql, args, err := sq.Select("*").From("invites").Where("user_id = ?", userID).OrderBy("created").ToSql()
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "building sql")
|
|
}
|
|
|
|
err = pgxscan.Select(ctx, db, &is, sql, args...)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "querying database")
|
|
}
|
|
if len(is) == 0 {
|
|
is = []Invite{}
|
|
}
|
|
|
|
return is, nil
|
|
}
|
|
|
|
const ErrTooManyInvites = errors.Sentinel("user invite limit reached")
|
|
|
|
func (db *DB) CreateInvite(ctx context.Context, userID xid.ID) (i Invite, err error) {
|
|
tx, err := db.Begin(ctx)
|
|
if err != nil {
|
|
return i, errors.Wrap(err, "beginning transaction")
|
|
}
|
|
defer func() {
|
|
err := tx.Rollback(ctx)
|
|
if err != nil && !errors.Is(err, pgx.ErrTxClosed) {
|
|
log.Error("rolling back transaction:", err)
|
|
}
|
|
}()
|
|
|
|
var maxInvites, inviteCount int
|
|
err = tx.QueryRow(ctx, "SELECT max_invites FROM users WHERE id = $1", userID).Scan(&maxInvites)
|
|
if err != nil {
|
|
return i, errors.Wrap(err, "querying invite limit")
|
|
}
|
|
err = tx.QueryRow(ctx, "SELECT count(*) FROM invites WHERE user_id = $1", userID).Scan(&inviteCount)
|
|
if err != nil {
|
|
return i, errors.Wrap(err, "querying current invite count")
|
|
}
|
|
|
|
if inviteCount >= maxInvites {
|
|
return i, ErrTooManyInvites
|
|
}
|
|
|
|
b := make([]byte, 32)
|
|
|
|
_, err = rand.Read(b)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
code := base64.RawURLEncoding.EncodeToString(b)
|
|
|
|
sql, args, err := sq.Insert("invites").Columns("user_id", "code").Values(userID, code).Suffix("RETURNING *").ToSql()
|
|
if err != nil {
|
|
return i, errors.Wrap(err, "building insert invite sql")
|
|
}
|
|
|
|
err = pgxscan.Get(ctx, db, &i, sql, args...)
|
|
if err != nil {
|
|
return i, errors.Wrap(err, "inserting invite")
|
|
}
|
|
|
|
err = tx.Commit(ctx)
|
|
if err != nil {
|
|
return i, errors.Wrap(err, "committing transaction")
|
|
}
|
|
return i, nil
|
|
}
|
|
|
|
func (db *DB) InvalidateInvite(ctx context.Context, tx pgx.Tx, code string) (valid, alreadyUsed bool, err error) {
|
|
err = tx.QueryRow(ctx, "SELECT used FROM invites WHERE code = $1", code).Scan(&alreadyUsed)
|
|
if err != nil {
|
|
if errors.Cause(err) == pgx.ErrNoRows {
|
|
return false, false, nil
|
|
}
|
|
|
|
return false, false, errors.Wrap(err, "checking if invite exists and is used")
|
|
}
|
|
|
|
// valid: true, already used: true
|
|
if alreadyUsed {
|
|
return true, true, nil
|
|
}
|
|
|
|
// invite is valid, not already used
|
|
_, err = tx.Exec(ctx, "UPDATE invites SET used = true WHERE code = $1", code)
|
|
if err != nil {
|
|
return false, false, errors.Wrap(err, "updating invite usage")
|
|
}
|
|
|
|
// valid: true, already used: false
|
|
return true, false, nil
|
|
}
|