Add user authorization

controllers/AdminController.cc

@@ -20,6 +20,19 @@ std::optional<visione::auth::UserContext> requireUser(
     return user;
 }
 
+bool blockPasswordChangeRequired(
+    const visione::auth::UserContext &user,
+    std::function<void(const HttpResponsePtr &)> &callback)
+{
+    if (!visione::auth::mustChangePassword(user))
+    {
+        return false;
+    }
+    callback(visione::http::error("password_change_required",
+                                  drogon::k403Forbidden));
+    return true;
+}
+
 void sendAdmin(Json::Value body,
                std::function<void(const HttpResponsePtr &)> &&callback)
 {
@@ -28,6 +41,7 @@ void sendAdmin(Json::Value body,
         callback(visione::http::json(std::move(body)));
         return;
     }
+
     const auto error = body.get("error", "").asString();
     const auto status = error == "forbidden" ? drogon::k403Forbidden
                                              : drogon::k400BadRequest;
@@ -48,7 +62,7 @@ void AdminController::createCategory(
     std::function<void(const HttpResponsePtr &)> &&callback)
 {
     auto user = requireUser(req, callback);
-    if (!user)
+    if (!user || blockPasswordChangeRequired(*user, callback))
     {
         return;
     }
@@ -70,7 +84,7 @@ void AdminController::createArea(
     std::function<void(const HttpResponsePtr &)> &&callback)
 {
     auto user = requireUser(req, callback);
-    if (!user)
+    if (!user || blockPasswordChangeRequired(*user, callback))
     {
         return;
     }
@@ -92,7 +106,7 @@ void AdminController::createTeam(
     std::function<void(const HttpResponsePtr &)> &&callback)
 {
     auto user = requireUser(req, callback);
-    if (!user)
+    if (!user || blockPasswordChangeRequired(*user, callback))
     {
         return;
     }
@@ -106,7 +120,7 @@ void AdminController::overviewStats(
     std::function<void(const HttpResponsePtr &)> &&callback)
 {
     auto user = requireUser(req, callback);
-    if (!user)
+    if (!user || blockPasswordChangeRequired(*user, callback))
     {
         return;
     }
@@ -114,3 +128,46 @@ void AdminController::overviewStats(
     sendAdmin(service.overviewStats(*user), std::move(callback));
 }
 
+void AdminController::listUsers(
+    const drogon::HttpRequestPtr &req,
+    std::function<void(const HttpResponsePtr &)> &&callback)
+{
+    auto user = requireUser(req, callback);
+    if (!user || blockPasswordChangeRequired(*user, callback))
+    {
+        return;
+    }
+    visione::services::AdminService service;
+    sendAdmin(service.listUsers(*user), std::move(callback));
+}
+
+void AdminController::updateUserRoles(
+    const drogon::HttpRequestPtr &req,
+    std::function<void(const HttpResponsePtr &)> &&callback,
+    long long userId)
+{
+    auto user = requireUser(req, callback);
+    if (!user || blockPasswordChangeRequired(*user, callback))
+    {
+        return;
+    }
+    visione::services::AdminService service;
+    sendAdmin(service.updateUserRoles(*user, userId, visione::http::requireJson(req)),
+              std::move(callback));
+}
+
+void AdminController::updateUserBan(
+    const drogon::HttpRequestPtr &req,
+    std::function<void(const HttpResponsePtr &)> &&callback,
+    long long userId)
+{
+    auto user = requireUser(req, callback);
+    if (!user || blockPasswordChangeRequired(*user, callback))
+    {
+        return;
+    }
+    visione::services::AdminService service;
+    sendAdmin(service.updateUserBan(*user, userId, visione::http::requireJson(req)),
+              std::move(callback));
+}
+