57 lines
1.3 KiB
Go
57 lines
1.3 KiB
Go
package auth
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"github.com/google/uuid"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
// GormStore : UserStore adossé à PostgreSQL via GORM.
|
|
type GormStore struct {
|
|
db *gorm.DB
|
|
}
|
|
|
|
func NewGormStore(db *gorm.DB) *GormStore {
|
|
return &GormStore{db: db}
|
|
}
|
|
|
|
// ByUsername cherche un utilisateur (requête paramétrée : anti-injection).
|
|
func (s *GormStore) ByUsername(username string) (User, bool) {
|
|
var u User
|
|
err := s.db.Where("username = ?", NormalizeUsername(username)).First(&u).Error
|
|
if errors.Is(err, gorm.ErrRecordNotFound) {
|
|
return User{}, false
|
|
}
|
|
if err != nil {
|
|
return User{}, false
|
|
}
|
|
return u, true
|
|
}
|
|
|
|
// Create insère un utilisateur (usage seed/admin), mot de passe déjà haché.
|
|
func (s *GormStore) Create(username, passwordHash string, role Role) (User, error) {
|
|
u := User{
|
|
ID: uuid.NewString(),
|
|
Username: NormalizeUsername(username),
|
|
PasswordHash: passwordHash,
|
|
Role: role,
|
|
}
|
|
if role == RoleAdmin {
|
|
u.TypeAbo = "admin"
|
|
}
|
|
if err := s.db.Create(&u).Error; err != nil {
|
|
return User{}, err
|
|
}
|
|
return u, nil
|
|
}
|
|
|
|
// EnsureUser crée l'utilisateur s'il n'existe pas encore (idempotent, pour le seed).
|
|
func (s *GormStore) EnsureUser(username, passwordHash string, role Role) error {
|
|
if _, found := s.ByUsername(username); found {
|
|
return nil
|
|
}
|
|
_, err := s.Create(username, passwordHash, role)
|
|
return err
|
|
}
|