/* openbills - Server for web based Libre Billing Software * Copyright (C) 2023 Vidhu Kant Sharma * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ package customer import ( "regexp" "strings" "net/mail" "vidhukant.com/openbills/errors" e "errors" ) // NOTE: very inefficient and really really really dumb but it works // TODO: find a better (or even a remotely good) way func checkDuplicate(field, value string, userId uint) error { if value != "" { var count int64 err := db.Model(&Customer{}). //Select(""). Where("user_id = ? and " + field + " = ?", userId, value). Count(&count). Error if err != nil { return err } if count > 0 { switch(field) { case "phone": return errors.ErrNonUniquePhone case "email": return errors.ErrNonUniqueEmail case "website": return errors.ErrNonUniqueWebsite default: return e.New(field + " is not unique") } } } return nil } func (c *Customer) validate() error { // trim whitespaces c.Name = strings.TrimSpace(c.Name) c.Gstin = strings.TrimSpace(c.Gstin) c.ContactName = strings.TrimSpace(c.Name) c.Phone = strings.TrimSpace(c.Phone) c.Email = strings.TrimSpace(c.Email) c.Website = strings.TrimSpace(c.Website) // don't validate if GSTIN is empty if c.Gstin != "" { // GSTIN regex validation match, _ := regexp.MatchString("^[0-9]{2}[A-Z]{5}[0-9]{4}[A-Z]{1}[1-9A-Z]{1}Z[0-9A-Z]{1}$", c.Gstin) if (!match) { return errors.ErrInvalidGSTIN } // make sure GSTIN is unique var count int64 err := db.Model(&Customer{}). Select("gstin"). Where("gstin = ? and user_id = ?", c.Gstin, c.UserID). Count(&count). Error if err != nil { return err } if count > 0 { return errors.ErrNonUniqueGSTIN } } // don't validate email if empty if c.Email != "" { _, err := mail.ParseAddress(c.Email) if err != nil { return errors.ErrInvalidEmail } } var err error for _, i := range [][]string{{"phone", c.Phone}, {"email", c.Email}, {"website", c.Website}} { err = checkDuplicate(i[0], i[1], c.UserID) if err != nil { return err } } return nil } func checkCustomerOwnership(customerId, userId uint) error { var customer Customer err := db. Select("id", "user_id"). Where("id = ?", customerId). Find(&customer). Error // TODO: handle potential errors if err != nil { return err } // customer doesn't exist if customer.ID == 0 { return errors.ErrNotFound } // user doesn't own this customer if customer.UserID != userId { return errors.ErrForbidden } return nil }