budgeteer/http/http.go

package http

import (
	"fmt"
	"io/fs"
	"net/http"
	"time"

	"git.javil.eu/jacob1123/budgeteer"
	"git.javil.eu/jacob1123/budgeteer/bcrypt"
	"git.javil.eu/jacob1123/budgeteer/postgres"
	"git.javil.eu/jacob1123/budgeteer/web"

	"github.com/gin-gonic/gin"
	"github.com/google/uuid"
)

// Handler handles incoming requests
type Handler struct {
	Service             *postgres.Repository
	TokenVerifier       budgeteer.TokenVerifier
	CredentialsVerifier *bcrypt.Verifier
}

const (
	expiration = 72
	authCookie = "authentication"
)

// Serve starts the HTTP Server
func (h *Handler) Serve() {
	router := gin.Default()

	templates, err := NewTemplates(router.FuncMap)
	if err != nil {
		panic(err)
	}

	router.HTMLRender = templates

	static, err := fs.Sub(web.Static, "static")
	if err != nil {
		panic("couldn't open static files")
	}
	router.StaticFS("/static", http.FS(static))

	router.GET("/", func(c *gin.Context) { c.HTML(http.StatusOK, "index.html", nil) })
	router.GET("/login", h.login)
	router.GET("/register", h.register)

	withLogin := router.Group("")
	withLogin.Use(h.verifyLoginWithRedirect)
	withLogin.GET("/dashboard", h.dashboard)
	withLogin.GET("/admin", h.admin)
	withLogin.GET("/admin/clear-database", h.clearDatabase)

	withBudget := router.Group("")
	withBudget.Use(h.verifyLoginWithRedirect)
	withBudget.Use(h.getImportantData)
	withBudget.GET("/budget/:budgetid", h.budgeting)
	withBudget.GET("/budget/:budgetid/clear", h.clearBudget)
	withBudget.GET("/budget/:budgetid/:year/:month", h.budgeting)
	withBudget.GET("/budget/:budgetid/all-accounts", h.budget)
	withBudget.GET("/budget/:budgetid/accounts", h.accounts)
	withBudget.GET("/budget/:budgetid/account/:accountid", h.account)

	api := router.Group("/api/v1")

	unauthenticated := api.Group("/user")
	unauthenticated.GET("/login", func(c *gin.Context) { c.Redirect(http.StatusPermanentRedirect, "/login") })
	unauthenticated.POST("/login", h.loginPost)
	unauthenticated.POST("/register", h.registerPost)

	authenticated := api.Group("")
	authenticated.Use(h.verifyLoginWithRedirect)

	user := authenticated.Group("/user")
	user.GET("/logout", logout)

	budget := authenticated.Group("/budget")
	budget.POST("/new", h.newBudget)

	transaction := authenticated.Group("/transaction")
	transaction.POST("/new", h.newTransaction)
	transaction.POST("/import/ynab", h.importYNAB)

	router.Run(":1323")
}

func (h *Handler) importYNAB(c *gin.Context) {
	budgetID, succ := c.GetPostForm("budget_id")
	if !succ {
		c.AbortWithError(http.StatusBadRequest, fmt.Errorf("no budget_id specified"))
		return
	}

	budgetUUID, err := uuid.Parse(budgetID)
	if !succ {
		c.AbortWithError(http.StatusBadRequest, err)
		return
	}

	ynab, err := NewYNABImport(h.Service.DB, budgetUUID)
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}

	transactionsFile, err := c.FormFile("transactions")
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}

	transactions, err := transactionsFile.Open()
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}

	err = ynab.ImportTransactions(transactions)
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}

	assignmentsFile, err := c.FormFile("assignments")
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}

	assignments, err := assignmentsFile.Open()
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}

	err = ynab.ImportAssignments(assignments)
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}
}

func (h *Handler) newTransaction(c *gin.Context) {
	transactionMemo, succ := c.GetPostForm("memo")
	if !succ {
		c.AbortWithStatus(http.StatusNotAcceptable)
		return
	}

	transactionAccount, succ := c.GetPostForm("account_id")
	if !succ {
		c.AbortWithStatus(http.StatusNotAcceptable)
		return
	}

	transactionAccountID, err := uuid.Parse(transactionAccount)
	if !succ {
		c.AbortWithStatus(http.StatusNotAcceptable)
		return
	}

	transactionDate, succ := c.GetPostForm("date")
	if !succ {
		c.AbortWithStatus(http.StatusNotAcceptable)
		return
	}

	transactionDateValue, err := time.Parse("2006-01-02", transactionDate)
	if err != nil {
		c.AbortWithStatus(http.StatusNotAcceptable)
		return
	}

	new := postgres.CreateTransactionParams{
		Memo:      transactionMemo,
		Date:      transactionDateValue,
		Amount:    postgres.Numeric{},
		AccountID: transactionAccountID,
	}
	_, err = h.Service.DB.CreateTransaction(c.Request.Context(), new)
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}
}

func (h *Handler) newBudget(c *gin.Context) {
	budgetName, succ := c.GetPostForm("name")
	if !succ {
		c.AbortWithStatus(http.StatusNotAcceptable)
		return
	}

	userID := c.MustGet("token").(budgeteer.Token).GetID()
	_, err := h.Service.NewBudget(budgetName, userID)
	if err != nil {
		c.AbortWithError(http.StatusInternalServerError, err)
		return
	}
}