diff options
author | Vidhu Kant Sharma <vidhukant@vidhukant.com> | 2023-10-05 15:29:50 +0530 |
---|---|---|
committer | Vidhu Kant Sharma <vidhukant@vidhukant.com> | 2023-10-05 15:29:50 +0530 |
commit | b643f7852f93f73843aa5f52f9b4545321713e10 (patch) | |
tree | 09938550f85f699fd665127888c4c668f0f1b2a9 /invoice/validators.go | |
parent | d8c1d5fedfac65a79490120195e273b5d5fc75e9 (diff) |
added invoice route (barebones)v0.0.11
Diffstat (limited to 'invoice/validators.go')
-rw-r--r-- | invoice/validators.go | 71 |
1 files changed, 71 insertions, 0 deletions
diff --git a/invoice/validators.go b/invoice/validators.go new file mode 100644 index 0000000..645bdff --- /dev/null +++ b/invoice/validators.go @@ -0,0 +1,71 @@ +/* openbills - Server for web based Libre Billing Software + * Copyright (C) 2023 Vidhu Kant Sharma <vidhukant@vidhukant.com> + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation, either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program. If not, see <https://www.gnu.org/licenses/>. + */ + +package invoice + +import ( + //"regexp" + //"strings" + //"net/mail" + //"net/url" + "vidhukant.com/openbills/errors" + //e "errors" +) + +func (i *Invoice) validate() error { + var count int64 + err := db.Model(&Invoice{}). + Where("user_id = ? and invoice_number = ?", i.UserID, i.InvoiceNumber). + Count(&count). + Error + + if err != nil { + return err + } + + if count > 0 { + return errors.ErrNonUniqueInvoiceNumber + } + + return nil +} + +func checkInvoiceOwnership(invoiceId, userId uint) error { + var invoice Invoice + err := db. + Select("id", "user_id"). + Where("id = ?", invoiceId). + Find(&invoice). + Error + + // TODO: handle potential errors + if err != nil { + return err + } + + // invoice doesn't exist + if invoice.ID == 0 { + return errors.ErrNotFound + } + + // user doesn't own this invoice + if invoice.UserID != userId { + return errors.ErrForbidden + } + + return nil +} |