From 6651daca670664f3de8af9c7bcb74b1e7c6c6be9 Mon Sep 17 00:00:00 2001
From: Zach Berwaldt <zberwaldt@tutamail.com>
Date: Thu, 7 Mar 2024 19:16:07 -0500
Subject: Add CORS middleware and authentication middleware to the API server.

The `setupRouter` function in `main.go` now includes a CORS middleware and a token authentication middleware. The CORS middleware allows cross-origin resource sharing by setting the appropriate response headers. The token authentication middleware checks for the presence of an `Authorization` header with a valid bearer token. If the token is missing or invalid, an unauthorized response is returned.

In addition to these changes, a new test file `main_test.go` has been added to test the `/api/v1/auth` route. This test suite includes two test cases: one for successful authentication and one for failed authentication.

Update go.mod to include new dependencies.

The `go.mod` file has been modified to include two new dependencies: `github.com/spf13/viper` and `github.com/stretchr/testify`.

Ignore go.sum changes.

Ignore changes in the `go.sum` file, as they only include updates to existing dependencies.
---
 api/internal/controllers/auth.go  |  66 +++++++++++++++
 api/internal/controllers/stats.go | 164 ++++++++++++++++++++++++++++++++++++++
 api/internal/controllers/user.go  |  17 ++++
 3 files changed, 247 insertions(+)
 create mode 100644 api/internal/controllers/auth.go
 create mode 100644 api/internal/controllers/stats.go
 create mode 100644 api/internal/controllers/user.go

(limited to 'api/internal/controllers')

diff --git a/api/internal/controllers/auth.go b/api/internal/controllers/auth.go
new file mode 100644
index 0000000..744a884
--- /dev/null
+++ b/api/internal/controllers/auth.go
@@ -0,0 +1,66 @@
+package controllers
+
+import (
+	"encoding/base64"
+	"net/http"
+	"github.com/gin-gonic/gin"
+	"water/api/database"
+	"errors"
+	"crypto/rand"
+	"database/sql"
+	
+	"water/api/models"
+	_ "github.com/mattn/go-sqlite3"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func AuthHandler (c *gin.Context) {
+	username, password, ok := c.Request.BasicAuth()
+	if !ok {
+		c.Header("WWW-Authenticate", `Basic realm="Please enter your username and password."`)
+		c.AbortWithStatus(http.StatusUnauthorized)
+		return
+	}
+
+	db := database.EstablishDBConnection()
+	defer func(db *sql.DB) {
+		err := db.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(db)
+
+	var user models.User
+	var preference models.Preference
+	var size models.Size
+
+	row := db.QueryRow("SELECT name, uuid, password, color, size, unit FROM Users u INNER JOIN Preferences p ON p.user_id = u.id INNER JOIN Sizes s ON p.size_id = s.id WHERE u.name = ?", username)
+	if err := row.Scan(&user.Name, &user.UUID, &user.Password, &preference.Color, &size.Size, &size.Unit); err != nil {
+		if errors.Is(err, sql.ErrNoRows) {
+			c.AbortWithStatus(http.StatusUnauthorized)
+			return
+		}
+	}
+
+	if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)); err != nil {
+		c.AbortWithStatus(http.StatusUnauthorized)
+		return
+	}
+
+	preference.Size = size
+
+	// Generate a simple API token
+	apiToken := generateToken()
+	c.JSON(http.StatusOK, gin.H{"token": apiToken, "user": user, "preferences": preference})
+}
+
+// generatToken will g
+func generateToken() string {
+	token := make([]byte, 32)
+	_, err := rand.Read(token)
+	if err != nil {
+		return ""
+	}
+	return base64.StdEncoding.EncodeToString(token)
+}
\ No newline at end of file
diff --git a/api/internal/controllers/stats.go b/api/internal/controllers/stats.go
new file mode 100644
index 0000000..9808ace
--- /dev/null
+++ b/api/internal/controllers/stats.go
@@ -0,0 +1,164 @@
+package controllers
+
+import (
+	"database/sql"
+	"github.com/gin-gonic/gin"
+	"net/http"
+	"water/api/database"
+	"water/api/models"
+)
+
+func GetAllStatistics(c *gin.Context) {
+	db := database.EstablishDBConnection()
+	defer func(db *sql.DB) {
+		err := db.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(db)
+
+	rows, err := db.Query("SELECT s.date, s.quantity, u.uuid, u.name FROM Statistics s INNER JOIN Users u ON u.id = s.user_id")
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+		return
+	}
+	defer func(rows *sql.Rows) {
+		err := rows.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(rows)
+
+	var data []models.Statistic
+
+	for rows.Next() {
+		var stat models.Statistic
+		var user models.User
+		if err := rows.Scan(&stat.Date, &stat.Quantity, &user.UUID, &user.Name); err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+		stat.User = user
+		data = append(data, stat)
+	}
+
+	c.JSON(http.StatusOK, data)
+}
+
+func PostNewStatistic(c *gin.Context) {
+	var stat models.StatisticPost
+
+	if err := c.BindJSON(&stat); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	db := database.EstablishDBConnection()
+	defer func(db *sql.DB) {
+		err := db.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(db)
+
+	result, err := db.Exec("INSERT INTO statistics (date, user_id, quantity) values (?, ?, ?)", stat.Date, stat.UserID, stat.Quantity)
+
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+	}
+
+	id, err := result.LastInsertId()
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+	}
+
+	c.JSON(http.StatusCreated, gin.H{"status": "created", "id": id})
+}
+
+func GetWeeklyStatistics (c *gin.Context) {
+	db := database.EstablishDBConnection()
+	defer func(db *sql.DB) {
+		err := db.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(db)
+
+	rows, err := db.Query("SELECT date, total FROM `WeeklyStatisticsView`")
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+		return
+	}
+	defer func(rows *sql.Rows) {
+		err := rows.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(rows)
+
+	var data []models.WeeklyStatistic
+	for rows.Next() {
+		var weeklyStat models.WeeklyStatistic
+		if err := rows.Scan(&weeklyStat.Date, &weeklyStat.Total); err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+		}
+		data = append(data, weeklyStat)
+	}
+
+	c.JSON(http.StatusOK, data)
+}
+
+func GetDailyUserStatistics(c *gin.Context) {
+	db := database.EstablishDBConnection()
+	defer func(db *sql.DB) {
+		err := db.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(db)
+
+	rows, err := db.Query("SELECT name, total FROM DailyUserStatistics")
+
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+		return
+	}
+	defer func(rows *sql.Rows) {
+		err := rows.Close()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+	}(rows)
+
+	var data []models.DailyUserTotals
+	for rows.Next() {
+		var stat models.DailyUserTotals
+		if err := rows.Scan(&stat.Name, &stat.Total); err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+		data = append(data, stat)
+	}
+
+	c.JSON(http.StatusOK, data)
+
+}
+
+func GetUserStatistics(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{"status": "ok", "uuid": c.Param("uuid")})
+}
+
+func UpdateUserStatistic(c *gin.Context) {
+	c.JSON(http.StatusNoContent, gin.H{"status": "No Content"})
+}
+
+func DeleteUserStatistic(c *gin.Context) {
+	c.JSON(http.StatusNoContent, gin.H{"status": "No Content"})
+}
diff --git a/api/internal/controllers/user.go b/api/internal/controllers/user.go
new file mode 100644
index 0000000..1f3f813
--- /dev/null
+++ b/api/internal/controllers/user.go
@@ -0,0 +1,17 @@
+package controllers
+
+import (
+	"net/http"
+	"github.com/gin-gonic/gin"
+)
+
+func GetUser(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{"message": "User found"})
+}
+func GetUserPreferences(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{"message": "Preferences fetched successfully"})
+}
+
+func UpdateUserPreferences(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{"message": "Preferences updated successfully"})
+}
\ No newline at end of file
-- 
cgit v1.1