auth_on_corp_manager.go

package controllers

import (
	"fmt"

	"github.com/opensourceways/app-cla-server/dbmodels"
	"github.com/opensourceways/app-cla-server/models"
	"github.com/opensourceways/app-cla-server/util"
)

// @Title authenticate corporation manager
// @Description authenticate corporation manager
// @Param	body		body 	models.CorporationManagerAuthentication	true		"body for corporation manager info"
// @Success 201 {int} map
// @Failure util.ErrNoCLABindingDoc	"no cla binding applied to corporation"
// @router /auth [post]
func (this *CorporationManagerController) Auth() {
	action := "authenticate as corp/employee manager"

	ip, fr := this.getRemoteAddr()
	if fr != nil {
		this.sendFailedResultAsResp(fr, action)
		return
	}

	var info models.CorporationManagerAuthentication
	if fr := this.fetchInputPayload(&info); fr != nil {
		this.sendFailedResultAsResp(fr, action)
		return
	}

	v, merr := (&info).Authenticate()
	if merr != nil {
		this.sendModelErrorAsResp(merr, action)
		return
	}
	if len(v) == 0 {
		this.sendFailedResponse(400, errWrongIDOrPassword, fmt.Errorf("wrong id or pw"), action)
		return
	}

	type authInfo struct {
		models.OrgRepo

		Role             string `json:"role"`
		Token            string `json:"token"`
		InitialPWChanged bool   `json:"initial_pw_changed"`
	}

	result := make([]authInfo, 0, len(v))

	for linkID, item := range v {
		token, err := this.newAccessToken(linkID, ip, &item)
		if err != nil {
			continue
		}

		result = append(result, authInfo{
			OrgRepo:          item.OrgRepo,
			Role:             item.Role,
			Token:            token,
			InitialPWChanged: item.InitialPWChanged,
		})
	}

	this.sendSuccessResp(result)
}

func (this *CorporationManagerController) newAccessToken(linkID, ip string, info *dbmodels.CorporationManagerCheckResult) (string, error) {
	permission := ""
	switch info.Role {
	case dbmodels.RoleAdmin:
		permission = PermissionCorpAdmin
	case dbmodels.RoleManager:
		permission = PermissionEmployeeManager
	}

	return this.newApiToken(
		permission, ip,
		&acForCorpManagerPayload{
			Name:    info.Name,
			Email:   info.Email,
			LinkID:  linkID,
			OrgInfo: info.OrgInfo,
		},
	)
}

type acForCorpManagerPayload struct {
	Name   string `json:"name"`
	Email  string `json:"email"`
	LinkID string `json:"link_id"`

	models.OrgInfo
}

func (this *acForCorpManagerPayload) hasEmployee(email string) bool {
	return util.EmailSuffix(this.Email) == util.EmailSuffix(email)
}