warehost/system/api.go

package system

import (
	"encoding/json"
	"log"
	"net/http"
	"strconv"

	"github.com/astaxie/session"
	"github.com/go-xorm/xorm"
	"github.com/julienschmidt/httprouter"

	libconfig "dev.sum7.de/sum7/warehost/config"
	libapi "dev.sum7.de/sum7/warehost/lib/api"
	libpassword "dev.sum7.de/sum7/warehost/lib/password"
)

//API keep data in module global
type API struct {
	config       *libconfig.Config
	sessions     *session.Manager
	dbconnection *xorm.Engine
}

// NewAPI sets the routes to the api functions
func NewAPI(config *libconfig.Config, sessions *session.Manager, dbconnection *xorm.Engine, router *httprouter.Router, prefix string) {
	api := &API{config: config, sessions: sessions, dbconnection: dbconnection}
	router.GET(prefix+"/status", api.Status)
	router.GET(prefix+"/login", api.Login)
	router.GET(prefix+"/login/:id", api.FakeLogin)
	router.GET(prefix+"/logout", api.Logout)
}

// Status to get Login and Server status
func (api *API) Status(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
	result, err := api.dbconnection.Count(new(Login))
	connection := false
	if err != nil {
		log.Print("[error][system]-status: get login count: ", err)
	} else {
		if result > 0 {
			connection = true
		}
	}
	libapi.JsonOutput(api.sessions, w, r, connection)
}

// Logout current user
func (api *API) Logout(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
	api.sessions.SessionDestroy(w, r)
	libapi.JsonOutput(api.sessions, w, r, true)
}

// Login of system
func (api *API) Login(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
	sess := api.sessions.SessionStart(w, r)
	var requestlogin RequestLogin
	err := json.NewDecoder(r.Body).Decode(&requestlogin)
	if err != nil {
		http.Error(w, err.Error(), http.StatusInternalServerError)
		log.Println("[system]-login error fetch request")
		return
	}
	var login = Login{Username: requestlogin.Username}
	_, err = api.dbconnection.Get(&login)
	if err != nil {
		result := false
		if login.Active {
			output, _ := libpassword.Validate(login.Password, requestlogin.Password)
			if output {
				result = true
				sess.Set("login", login)
			}
		}
		libapi.JsonOutput(api.sessions, w, r, result)
	} else {
		http.Error(w, err.Error(), http.StatusInternalServerError)
		log.Println("[system]-login error fetch database")
		libapi.JsonOutput(api.sessions, w, r, true)
	}
}

// FakeLogin is a API test function
func (api *API) FakeLogin(w http.ResponseWriter, r *http.Request, params httprouter.Params) {
	id, _ := strconv.ParseInt(params.ByName("id"), 10, 64)
	sess := api.sessions.SessionStart(w, r)
	var login = Login{}
	_, err := api.dbconnection.Id(id).Get(&login)
	result := false
	if err != nil {
		log.Print("[system] Error get login count: ", err)
	} else {
		sess.Set("login", login)
		result = true
	}
	libapi.JsonOutput(api.sessions, w, r, result)
}