From ac7aa8c6e95023def1eba7615d8a42ad52271500 Mon Sep 17 00:00:00 2001
From: Vidhu Kant Sharma <vidhukant@vidhukant.xyz>
Date: Sun, 29 Jan 2023 20:11:09 +0530
Subject: checking password before editing/deleting user

---
 user/service.go | 60 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)
 create mode 100644 user/service.go

(limited to 'user/service.go')

diff --git a/user/service.go b/user/service.go
new file mode 100644
index 0000000..51490e7
--- /dev/null
+++ b/user/service.go
@@ -0,0 +1,60 @@
+/* OpenBills-server - Server for libre billing software OpenBills-web
+ * Copyright (C) 2022  Vidhu Kant Sharma <vidhukant@vidhukant.xyz>
+
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+package user
+
+import (
+	"context"
+	"fmt"
+	"go.mongodb.org/mongo-driver/bson"
+	"go.mongodb.org/mongo-driver/bson/primitive"
+)
+
+// Add user to db
+func saveUser(u User) (primitive.ObjectID, error) {
+	err := u.hashPassword()
+	if err != nil {
+		return *new(primitive.ObjectID), err
+	}
+	res, err := db.InsertOne(context.TODO(), u)
+	return res.InsertedID.(primitive.ObjectID), err
+}
+
+// Delete user from DB
+func deleteUser(id primitive.ObjectID) error {
+	_, err := db.DeleteOne(context.TODO(), bson.M{"_id": id})
+	return err
+}
+
+// modify user in DB
+func modifyUser(id primitive.ObjectID, nu User) error {
+	fmt.Println(nu.Password)
+	_, err := db.UpdateOne(context.TODO(), bson.D{{"_id", id}}, bson.D{{"$set", nu}})
+	return err
+}
+
+// gets user info
+func getUser(userId primitive.ObjectID) (User, error) {
+	var user User
+	err := db.FindOne(context.TODO(), bson.D{{"_id", userId}}).Decode(&user)
+
+	// remove sensitive data
+	user.Password = ""
+	user.Sessions = []Session{}
+
+	return user, err
+}
-- 
cgit v1.2.3