46d38afe2d
Four new admin endpoints under existing RequireAdmin middleware:
- POST /api/admin/users — admin-creates-user. Body
{username, password, display_name?, is_admin?}. Same username
+ password validation as the public /register handler. 409
on duplicate. Audits ActionCreateUserAdmin.
- DELETE /api/admin/users/{id} — hard delete. Last-admin guard
refuses delete when target is the only admin (409). Schema's
ON DELETE CASCADE on user-FK tables handles plays/likes/
sessions cleanup. Audits ActionDeleteUser with target's
username + was_admin flag.
- POST /api/admin/users/{id}/reset-password — body
{password}. 8-char minimum. Admin sets a new password
without knowing the old one. Audits ActionPasswordResetAdmin.
- PUT /api/admin/users/{id}/auto-approve — body
{auto_approve: bool}. Toggles the per-user flag added in T1
(the #355 sub-feature surface). Audits ActionAutoApproveToggle.
adminUserView shape extended with auto_approve_requests so the
list and toggle responses carry the flag. ListUsers SQL query
updated to include auto_approve_requests; generated Go updated
to match. Tests cover happy paths, last-admin guard on delete,
password validation, duplicate username, and the auto-approve
round-trip.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
457 lines
13 KiB
Go
457 lines
13 KiB
Go
// Code generated by sqlc. DO NOT EDIT.
|
|
// versions:
|
|
// sqlc v1.31.1
|
|
// source: users.sql
|
|
|
|
package dbq
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/jackc/pgx/v5/pgtype"
|
|
)
|
|
|
|
const countAdmins = `-- name: CountAdmins :one
|
|
SELECT count(*) FROM users WHERE is_admin = true
|
|
`
|
|
|
|
func (q *Queries) CountAdmins(ctx context.Context) (int64, error) {
|
|
row := q.db.QueryRow(ctx, countAdmins)
|
|
var count int64
|
|
err := row.Scan(&count)
|
|
return count, err
|
|
}
|
|
|
|
const countUsers = `-- name: CountUsers :one
|
|
SELECT count(*) FROM users
|
|
`
|
|
|
|
func (q *Queries) CountUsers(ctx context.Context) (int64, error) {
|
|
row := q.db.QueryRow(ctx, countUsers)
|
|
var count int64
|
|
err := row.Scan(&count)
|
|
return count, err
|
|
}
|
|
|
|
const createUser = `-- name: CreateUser :one
|
|
INSERT INTO users (username, password_hash, api_token, is_admin, display_name)
|
|
VALUES ($1, $2, $3, $4, $5)
|
|
RETURNING id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests
|
|
`
|
|
|
|
type CreateUserParams struct {
|
|
Username string
|
|
PasswordHash string
|
|
ApiToken string
|
|
IsAdmin bool
|
|
DisplayName *string
|
|
}
|
|
|
|
func (q *Queries) CreateUser(ctx context.Context, arg CreateUserParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, createUser,
|
|
arg.Username,
|
|
arg.PasswordHash,
|
|
arg.ApiToken,
|
|
arg.IsAdmin,
|
|
arg.DisplayName,
|
|
)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const createUserAdmin = `-- name: CreateUserAdmin :one
|
|
INSERT INTO users (username, password_hash, api_token, is_admin, display_name)
|
|
VALUES ($1, $2, $3, $4, $5)
|
|
RETURNING id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests
|
|
`
|
|
|
|
type CreateUserAdminParams struct {
|
|
Username string
|
|
PasswordHash string
|
|
ApiToken string
|
|
IsAdmin bool
|
|
DisplayName *string
|
|
}
|
|
|
|
// Admin-driven user creation. Distinct from CreateUser/CreateUserFirstAdminRace:
|
|
// the caller (an admin) supplies all five fields explicitly including is_admin,
|
|
// so an admin can promote on creation. Used by POST /api/admin/users.
|
|
func (q *Queries) CreateUserAdmin(ctx context.Context, arg CreateUserAdminParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, createUserAdmin,
|
|
arg.Username,
|
|
arg.PasswordHash,
|
|
arg.ApiToken,
|
|
arg.IsAdmin,
|
|
arg.DisplayName,
|
|
)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const createUserFirstAdminRace = `-- name: CreateUserFirstAdminRace :one
|
|
INSERT INTO users (username, password_hash, api_token, is_admin, display_name)
|
|
VALUES (
|
|
$1, $2, $3,
|
|
(SELECT NOT EXISTS (SELECT 1 FROM users)),
|
|
$4
|
|
)
|
|
RETURNING id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests
|
|
`
|
|
|
|
type CreateUserFirstAdminRaceParams struct {
|
|
Username string
|
|
PasswordHash string
|
|
ApiToken string
|
|
DisplayName *string
|
|
}
|
|
|
|
// Inserts a new user; sets is_admin=true ONLY when no users currently
|
|
// exist. The (SELECT NOT EXISTS ...) subquery is evaluated at INSERT
|
|
// time within the same statement, so the result reflects committed
|
|
// state at that moment.
|
|
//
|
|
// Race semantics: two concurrent calls in an empty-users state may
|
|
// both observe "no users" and both insert with is_admin=true. That's
|
|
// benign — having two admins from the gate is fine; what matters is
|
|
// that there's AT LEAST one. If the two calls happened to share the
|
|
// same username, the unique constraint on users.username arbitrates
|
|
// and the second caller's INSERT fails with a unique violation. The
|
|
// caller (registration handler) can retry as a regular non-admin in
|
|
// that case (or surface a "username taken" error to the user).
|
|
func (q *Queries) CreateUserFirstAdminRace(ctx context.Context, arg CreateUserFirstAdminRaceParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, createUserFirstAdminRace,
|
|
arg.Username,
|
|
arg.PasswordHash,
|
|
arg.ApiToken,
|
|
arg.DisplayName,
|
|
)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const deleteUser = `-- name: DeleteUser :exec
|
|
DELETE FROM users WHERE id = $1
|
|
`
|
|
|
|
// Hard delete with cascade. The schema's ON DELETE CASCADE foreign keys
|
|
// handle plays/likes/sessions/etc. Caller must enforce the last-admin
|
|
// guard at the HTTP layer (count admins, refuse if target is the only
|
|
// admin). The lidarr_quarantine, general_likes*, play_events,
|
|
// sessions, and other user-FK tables all have ON DELETE CASCADE so
|
|
// this is a clean drop.
|
|
func (q *Queries) DeleteUser(ctx context.Context, id pgtype.UUID) error {
|
|
_, err := q.db.Exec(ctx, deleteUser, id)
|
|
return err
|
|
}
|
|
|
|
const getListenBrainzConfig = `-- name: GetListenBrainzConfig :one
|
|
SELECT
|
|
u.listenbrainz_token,
|
|
u.listenbrainz_enabled,
|
|
(SELECT MAX(pe.scrobbled_at)::timestamptz
|
|
FROM play_events pe
|
|
WHERE pe.user_id = u.id) AS last_scrobbled_at
|
|
FROM users u
|
|
WHERE u.id = $1
|
|
`
|
|
|
|
type GetListenBrainzConfigRow struct {
|
|
ListenbrainzToken *string
|
|
ListenbrainzEnabled bool
|
|
LastScrobbledAt pgtype.Timestamptz
|
|
}
|
|
|
|
// Returns the user's LB token + enabled flag and the most recent
|
|
// play_events.scrobbled_at for last-scrobbled-at status.
|
|
func (q *Queries) GetListenBrainzConfig(ctx context.Context, id pgtype.UUID) (GetListenBrainzConfigRow, error) {
|
|
row := q.db.QueryRow(ctx, getListenBrainzConfig, id)
|
|
var i GetListenBrainzConfigRow
|
|
err := row.Scan(&i.ListenbrainzToken, &i.ListenbrainzEnabled, &i.LastScrobbledAt)
|
|
return i, err
|
|
}
|
|
|
|
const getUserByAPIToken = `-- name: GetUserByAPIToken :one
|
|
SELECT id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests FROM users WHERE api_token = $1
|
|
`
|
|
|
|
func (q *Queries) GetUserByAPIToken(ctx context.Context, apiToken string) (User, error) {
|
|
row := q.db.QueryRow(ctx, getUserByAPIToken, apiToken)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const getUserByID = `-- name: GetUserByID :one
|
|
SELECT id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests FROM users WHERE id = $1
|
|
`
|
|
|
|
func (q *Queries) GetUserByID(ctx context.Context, id pgtype.UUID) (User, error) {
|
|
row := q.db.QueryRow(ctx, getUserByID, id)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const getUserByUsername = `-- name: GetUserByUsername :one
|
|
SELECT id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests FROM users WHERE username = $1
|
|
`
|
|
|
|
func (q *Queries) GetUserByUsername(ctx context.Context, username string) (User, error) {
|
|
row := q.db.QueryRow(ctx, getUserByUsername, username)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const listUsers = `-- name: ListUsers :many
|
|
SELECT id, username, display_name, is_admin, auto_approve_requests, created_at
|
|
FROM users
|
|
ORDER BY created_at DESC
|
|
`
|
|
|
|
type ListUsersRow struct {
|
|
ID pgtype.UUID
|
|
Username string
|
|
DisplayName *string
|
|
IsAdmin bool
|
|
AutoApproveRequests bool
|
|
CreatedAt pgtype.Timestamptz
|
|
}
|
|
|
|
// Admin user-management list. Sort newest-first.
|
|
func (q *Queries) ListUsers(ctx context.Context) ([]ListUsersRow, error) {
|
|
rows, err := q.db.Query(ctx, listUsers)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer rows.Close()
|
|
var items []ListUsersRow
|
|
for rows.Next() {
|
|
var i ListUsersRow
|
|
if err := rows.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.DisplayName,
|
|
&i.IsAdmin,
|
|
&i.AutoApproveRequests,
|
|
&i.CreatedAt,
|
|
); err != nil {
|
|
return nil, err
|
|
}
|
|
items = append(items, i)
|
|
}
|
|
if err := rows.Err(); err != nil {
|
|
return nil, err
|
|
}
|
|
return items, nil
|
|
}
|
|
|
|
const resetUserPassword = `-- name: ResetUserPassword :exec
|
|
UPDATE users
|
|
SET password_hash = $2
|
|
WHERE id = $1
|
|
`
|
|
|
|
type ResetUserPasswordParams struct {
|
|
ID pgtype.UUID
|
|
PasswordHash string
|
|
}
|
|
|
|
// Admin-driven password reset: caller writes a new hashed password to
|
|
// the target user's row. No knowledge of the old password is required
|
|
// (this is the admin path; self-service "knows current password" is
|
|
// a separate U3 query).
|
|
func (q *Queries) ResetUserPassword(ctx context.Context, arg ResetUserPasswordParams) error {
|
|
_, err := q.db.Exec(ctx, resetUserPassword, arg.ID, arg.PasswordHash)
|
|
return err
|
|
}
|
|
|
|
const setListenBrainzEnabled = `-- name: SetListenBrainzEnabled :exec
|
|
UPDATE users
|
|
SET listenbrainz_enabled = $2
|
|
WHERE id = $1
|
|
`
|
|
|
|
type SetListenBrainzEnabledParams struct {
|
|
ID pgtype.UUID
|
|
ListenbrainzEnabled bool
|
|
}
|
|
|
|
func (q *Queries) SetListenBrainzEnabled(ctx context.Context, arg SetListenBrainzEnabledParams) error {
|
|
_, err := q.db.Exec(ctx, setListenBrainzEnabled, arg.ID, arg.ListenbrainzEnabled)
|
|
return err
|
|
}
|
|
|
|
const setListenBrainzToken = `-- name: SetListenBrainzToken :exec
|
|
UPDATE users
|
|
SET listenbrainz_token = $2,
|
|
listenbrainz_enabled = CASE WHEN COALESCE($2, '') = '' THEN FALSE ELSE listenbrainz_enabled END
|
|
WHERE id = $1
|
|
`
|
|
|
|
type SetListenBrainzTokenParams struct {
|
|
ID pgtype.UUID
|
|
ListenbrainzToken *string
|
|
}
|
|
|
|
func (q *Queries) SetListenBrainzToken(ctx context.Context, arg SetListenBrainzTokenParams) error {
|
|
_, err := q.db.Exec(ctx, setListenBrainzToken, arg.ID, arg.ListenbrainzToken)
|
|
return err
|
|
}
|
|
|
|
const setSubsonicPassword = `-- name: SetSubsonicPassword :exec
|
|
UPDATE users SET subsonic_password = $2 WHERE id = $1
|
|
`
|
|
|
|
type SetSubsonicPasswordParams struct {
|
|
ID pgtype.UUID
|
|
SubsonicPassword *string
|
|
}
|
|
|
|
// Stores (or clears with NULL) the per-user Subsonic legacy credential used
|
|
// for t/s and p auth on /rest/*. Must be plaintext; see migration 0003.
|
|
func (q *Queries) SetSubsonicPassword(ctx context.Context, arg SetSubsonicPasswordParams) error {
|
|
_, err := q.db.Exec(ctx, setSubsonicPassword, arg.ID, arg.SubsonicPassword)
|
|
return err
|
|
}
|
|
|
|
const updateUserAdmin = `-- name: UpdateUserAdmin :one
|
|
UPDATE users
|
|
SET is_admin = $2
|
|
WHERE id = $1
|
|
RETURNING id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests
|
|
`
|
|
|
|
type UpdateUserAdminParams struct {
|
|
ID pgtype.UUID
|
|
IsAdmin bool
|
|
}
|
|
|
|
// Sets is_admin to the given value. Returns the updated row so the
|
|
// handler can echo it back to the caller.
|
|
func (q *Queries) UpdateUserAdmin(ctx context.Context, arg UpdateUserAdminParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, updateUserAdmin, arg.ID, arg.IsAdmin)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|
|
|
|
const updateUserAutoApprove = `-- name: UpdateUserAutoApprove :one
|
|
UPDATE users
|
|
SET auto_approve_requests = $2
|
|
WHERE id = $1
|
|
RETURNING id, username, password_hash, api_token, is_admin, created_at, subsonic_password, listenbrainz_token, listenbrainz_enabled, display_name, auto_approve_requests
|
|
`
|
|
|
|
type UpdateUserAutoApproveParams struct {
|
|
ID pgtype.UUID
|
|
AutoApproveRequests bool
|
|
}
|
|
|
|
// Toggle the per-user auto_approve_requests flag.
|
|
func (q *Queries) UpdateUserAutoApprove(ctx context.Context, arg UpdateUserAutoApproveParams) (User, error) {
|
|
row := q.db.QueryRow(ctx, updateUserAutoApprove, arg.ID, arg.AutoApproveRequests)
|
|
var i User
|
|
err := row.Scan(
|
|
&i.ID,
|
|
&i.Username,
|
|
&i.PasswordHash,
|
|
&i.ApiToken,
|
|
&i.IsAdmin,
|
|
&i.CreatedAt,
|
|
&i.SubsonicPassword,
|
|
&i.ListenbrainzToken,
|
|
&i.ListenbrainzEnabled,
|
|
&i.DisplayName,
|
|
&i.AutoApproveRequests,
|
|
)
|
|
return i, err
|
|
}
|