summaryrefslogtreecommitdiff
path: root/database/users.go
blob: 164a631454ecfa785fabbcbd403711bed44f75d5 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
package database

import (
	"database/sql"
	"errors"
	"time"

	_ "github.com/mattn/go-sqlite3"
)

var ErrNotFound = errors.New("not found")

type User struct {
	ID        string
	Username  string
	CreatedAt time.Time
	LastSeen  time.Time
}

func scanUser(row *sql.Row) (*User, error) {
	var u User
	err := row.Scan(&u.ID, &u.Username, &u.CreatedAt, &u.LastSeen)
	if errors.Is(err, sql.ErrNoRows) {
		return nil, ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	return &u, nil
}

const userColumns = "id, username, created_at, last_seen"

func CreateUser(db *sql.DB, id, username string) (*User, error) {
	now := time.Now()
	_, err := db.Exec(
		"INSERT INTO users ("+userColumns+") VALUES (?, ?, ?, ?)",
		id, username, now, now,
	)
	if err != nil {
		return nil, err
	}
	return &User{ID: id, Username: username, CreatedAt: now, LastSeen: now}, nil
}

func GetUserByID(db *sql.DB, id string) (*User, error) {
	return scanUser(db.QueryRow("SELECT "+userColumns+" FROM users WHERE id = ?", id))
}

func RenameUser(db *sql.DB, userID, username string) error {
	_, err := db.Exec("UPDATE users SET username = ? WHERE id = ?", username, userID)
	return err
}

func ListUsers(db *sql.DB) ([]User, error) {
	rows, err := db.Query("SELECT " + userColumns + " FROM users ORDER BY last_seen DESC")
	if err != nil {
		return nil, err
	}
	defer rows.Close()

	users := []User{}
	for rows.Next() {
		var u User
		if err := rows.Scan(&u.ID, &u.Username, &u.CreatedAt, &u.LastSeen); err != nil {
			return nil, err
		}
		users = append(users, u)
	}
	return users, rows.Err()
}

func GetUserByUsername(db *sql.DB, username string) (*User, error) {
	return scanUser(db.QueryRow("SELECT "+userColumns+" FROM users WHERE username = ?", username))
}

// GetUserByMAC finds the account a hardware address currently belongs to.
// Columns are alias-qualified because macs also has a last_seen column.
func GetUserByMAC(db *sql.DB, mac string) (*User, error) {
	return scanUser(db.QueryRow(
		"SELECT u.id, u.username, u.created_at, u.last_seen FROM users u JOIN macs m ON m.user_id = u.id WHERE m.mac = ?",
		mac,
	))
}

// TouchUser bumps a user's last_seen — this is the timestamp the portal shows
// when someone tries to reclaim a taken handle.
func TouchUser(db *sql.DB, id string) error {
	_, err := db.Exec("UPDATE users SET last_seen = ? WHERE id = ?", time.Now(), id)
	return err
}

// AssociateMAC binds a MAC to a user, moving it from any previous owner. This is
// what "logging back in" from a rotated MAC does.
func AssociateMAC(db *sql.DB, mac, userID string) error {
	now := time.Now()
	_, err := db.Exec(`INSERT INTO macs (mac, user_id, first_seen, last_seen) VALUES (?, ?, ?, ?)
		ON CONFLICT(mac) DO UPDATE SET user_id = excluded.user_id, last_seen = excluded.last_seen`,
		mac, userID, now, now)
	return err
}

// MACBelongsToUser reports whether a MAC is currently bound to the given user.
func MACBelongsToUser(db *sql.DB, mac, userID string) (bool, error) {
	var owner string
	err := db.QueryRow("SELECT user_id FROM macs WHERE mac = ?", mac).Scan(&owner)
	if errors.Is(err, sql.ErrNoRows) {
		return false, nil
	}
	if err != nil {
		return false, err
	}
	return owner == userID, nil
}

// SetUserPrimaryMAC sets the user's primary device (the MAC its
// <username>.<zone> name points at).
func SetUserPrimaryMAC(db *sql.DB, userID, mac string) error {
	_, err := db.Exec("UPDATE users SET primary_mac = ? WHERE id = ?", mac, userID)
	return err
}

// SetPrimaryMACIfUnset atomically makes mac the primary device only when the
// user has none yet. The conditional WHERE makes "first device wins" race-free:
// concurrent associations can't both win, and there's no read-then-write gap.
func SetPrimaryMACIfUnset(db *sql.DB, userID, mac string) error {
	_, err := db.Exec("UPDATE users SET primary_mac = ? WHERE id = ? AND primary_mac IS NULL", mac, userID)
	return err
}

// GetUserPrimaryMAC returns the user's primary MAC, or "" if unset.
func GetUserPrimaryMAC(db *sql.DB, userID string) (string, error) {
	var mac sql.NullString
	err := db.QueryRow("SELECT primary_mac FROM users WHERE id = ?", userID).Scan(&mac)
	if errors.Is(err, sql.ErrNoRows) {
		return "", ErrNotFound
	}
	if err != nil {
		return "", err
	}
	return mac.String, nil
}