add membership

local/service/membership.go

@@ -0,0 +1,173 @@
+package service
+
+import (
+	"acc-server-manager/local/model"
+	"acc-server-manager/local/repository"
+	"acc-server-manager/local/utl/jwt"
+	"context"
+	"errors"
+	"os"
+
+	"github.com/google/uuid"
+	"golang.org/x/crypto/bcrypt"
+)
+
+// MembershipService provides business logic for membership-related operations.
+type MembershipService struct {
+	repo *repository.MembershipRepository
+}
+
+// NewMembershipService creates a new MembershipService.
+func NewMembershipService(repo *repository.MembershipRepository) *MembershipService {
+	return &MembershipService{repo: repo}
+}
+
+// Login authenticates a user and returns a JWT.
+func (s *MembershipService) Login(ctx context.Context, username, password string) (string, error) {
+	user, err := s.repo.FindUserByUsername(ctx, username)
+	if err != nil {
+		return "", errors.New("invalid credentials")
+	}
+
+	if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)); err != nil {
+		return "", errors.New("invalid credentials")
+	}
+
+	return jwt.GenerateToken(user)
+}
+
+// CreateUser creates a new user.
+func (s *MembershipService) CreateUser(ctx context.Context, username, password, roleName string) (*model.User, error) {
+
+	role, err := s.repo.FindRoleByName(ctx, roleName)
+	if err != nil {
+		return nil, errors.New("role not found")
+	}
+
+	user := &model.User{
+		Username: username,
+		Password: password,
+		RoleID:   role.ID,
+	}
+
+	if err := s.repo.CreateUser(ctx, user); err != nil {
+		return nil, err
+	}
+
+	return user, nil
+}
+
+// ListUsers retrieves all users.
+func (s *MembershipService) ListUsers(ctx context.Context) ([]*model.User, error) {
+	return s.repo.ListUsers(ctx)
+}
+
+// GetUser retrieves a single user by ID.
+func (s *MembershipService) GetUser(ctx context.Context, userID uuid.UUID) (*model.User, error) {
+	return s.repo.FindUserByID(ctx, userID)
+}
+
+// GetUserWithPermissions retrieves a single user by ID with their role and permissions.
+func (s *MembershipService) GetUserWithPermissions(ctx context.Context, userID uuid.UUID) (*model.User, error) {
+	return s.repo.FindUserByIDWithPermissions(ctx, userID)
+}
+
+// UpdateUserRequest defines the request body for updating a user.
+type UpdateUserRequest struct {
+	Username *string    `json:"username"`
+	Password *string    `json:"password"`
+	RoleID   *uuid.UUID `json:"roleId"`
+}
+
+// UpdateUser updates a user's details.
+func (s *MembershipService) UpdateUser(ctx context.Context, userID uuid.UUID, req UpdateUserRequest) (*model.User, error) {
+	user, err := s.repo.FindUserByID(ctx, userID)
+	if err != nil {
+		return nil, errors.New("user not found")
+	}
+
+	if req.Username != nil {
+		user.Username = *req.Username
+	}
+
+	if req.Password != nil && *req.Password != "" {
+		user.Password = *req.Password
+	}
+
+	if req.RoleID != nil {
+		// Check if role exists
+		_, err := s.repo.FindRoleByID(ctx, *req.RoleID)
+		if err != nil {
+			return nil, errors.New("role not found")
+		}
+		user.RoleID = *req.RoleID
+	}
+
+	if err := s.repo.UpdateUser(ctx, user); err != nil {
+		return nil, err
+	}
+
+	return user, nil
+}
+
+// HasPermission checks if a user has a specific permission.
+func (s *MembershipService) HasPermission(ctx context.Context, userID uuid.UUID, permissionName string) (bool, error) {
+	user, err := s.repo.FindUserByIDWithPermissions(ctx, userID)
+	if err != nil {
+		return false, err
+	}
+
+	// Super admin has all permissions
+	if user.Role.Name == "Super Admin" {
+		return true, nil
+	}
+
+	for _, p := range user.Role.Permissions {
+		if p.Name == permissionName {
+			return true, nil
+		}
+	}
+
+	return false, nil
+}
+
+// SetupInitialData creates the initial roles and permissions.
+func (s *MembershipService) SetupInitialData(ctx context.Context) error {
+	// Define all permissions
+	permissions := model.AllPermissions()
+
+	createdPermissions := make([]model.Permission, 0)
+	for _, pName := range permissions {
+		perm, err := s.repo.FindPermissionByName(ctx, pName)
+		if err != nil { // Assuming error means not found
+			perm = &model.Permission{Name: pName}
+			if err := s.repo.CreatePermission(ctx, perm); err != nil {
+				return err
+			}
+		}
+		createdPermissions = append(createdPermissions, *perm)
+	}
+
+	// Create Super Admin role with all permissions
+	superAdminRole, err := s.repo.FindRoleByName(ctx, "Super Admin")
+	if err != nil {
+		superAdminRole = &model.Role{Name: "Super Admin"}
+		if err := s.repo.CreateRole(ctx, superAdminRole); err != nil {
+			return err
+		}
+	}
+	if err := s.repo.AssignPermissionsToRole(ctx, superAdminRole, createdPermissions); err != nil {
+		return err
+	}
+
+	// Create a default admin user if one doesn't exist
+	_, err = s.repo.FindUserByUsername(ctx, "admin")
+	if err != nil {
+		_, err = s.CreateUser(ctx, "admin", os.Getenv("PASSWORD"), "Super Admin") // Default password, should be changed
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}