package v1 import ( "net/http" "strconv" "git.kolaente.de/konrad/Library/models" "github.com/labstack/echo" ) type datPassword struct { Password string `json:"password"` } // UserChangePassword is the handler to add a user func UserChangePassword(c echo.Context) error { // Get the ID user := c.Param("id") if user == "" { return c.JSON(http.StatusBadRequest, models.Message{"User ID cannot be empty."}) } // Make int userID, err := strconv.ParseInt(user, 10, 64) if err != nil { return c.JSON(http.StatusBadRequest, models.Message{"User ID is invalid."}) } // Check if the user is admin or itself userJWTinfo, err := models.GetCurrentUser(c) if !models.IsAdmin(c) { if userJWTinfo.ID != userID { return echo.ErrUnauthorized } } // Check for Request Content pwFromString := c.FormValue("password") var datPw datPassword if pwFromString == "" { if err := c.Bind(&datPw); err != nil { return c.JSON(http.StatusBadRequest, models.Message{"No password provided."}) } } else { // Take the value directly from the input datPw.Password = pwFromString } // Get User Infos _, exists, err := models.GetUserByID(userID) if err != nil { return c.JSON(http.StatusInternalServerError, models.Message{"Error getting user infos."}) } // Check if it exists if !exists { return c.JSON(http.StatusNotFound, models.Message{"User not found."}) } err = models.UpdateUserPassword(userID, datPw.Password) if err != nil { return err } return c.JSON(http.StatusOK, models.Message{"The password was updated successfully"}) }