numerus/pkg/profile.go

package pkg

import (
	"context"
	"html/template"
	"net/http"
)

type LanguageOption struct {
	Tag  string
	Name string
}

type profileForm struct {
	locale          *Locale
	Name            *InputField
	Email           *InputField
	Password        *InputField
	PasswordConfirm *InputField
	Language        *SelectField
}

func newProfileForm(ctx context.Context, conn *Conn, locale *Locale) *profileForm {
	automaticOption := pgettext("language option", "Automatic", locale)
	languages := MustGetOptions(ctx, conn, "select 'und', $1 union all select lang_tag, endonym from language where selectable", automaticOption)
	return &profileForm{
		locale: locale,
		Name: &InputField{
			Name:     "name",
			Label:    pgettext("input", "User name", locale),
			Type:     "text",
			Required: true,
			Attributes: []template.HTMLAttr{
				`autocomplete="name"`,
			},
		},
		Email: &InputField{
			Name:     "email",
			Label:    pgettext("input", "Email", locale),
			Type:     "email",
			Required: true,
			Attributes: []template.HTMLAttr{
				`autocomplete="username"`,
			},
		},
		Password: &InputField{
			Name:  "password",
			Label: pgettext("input", "Password", locale),
			Type:  "password",
			Attributes: []template.HTMLAttr{
				`autocomplete="new-password"`,
			},
		},
		PasswordConfirm: &InputField{
			Name:  "password_confirm",
			Label: pgettext("input", "Password Confirmation", locale),
			Type:  "password",
			Attributes: []template.HTMLAttr{
				`autocomplete="new-password"`,
			},
		},
		Language: &SelectField{
			Name:    "language",
			Label:   pgettext("input", "Language", locale),
			Options: languages,
			Attributes: []template.HTMLAttr{
				`autocomplete="language"`,
			},
		},
	}
}

func (form *profileForm) Parse(r *http.Request) error {
	if err := r.ParseForm(); err != nil {
		return err
	}
	form.Email.FillValue(r)
	form.Name.FillValue(r)
	form.Password.FillValue(r)
	form.PasswordConfirm.FillValue(r)
	form.Language.FillValue(r)
	return nil
}

func (form *profileForm) Validate() bool {
	validator := newFormValidator()
	if validator.CheckRequiredInput(form.Email, gettext("Email can not be empty.", form.locale)) {
		validator.CheckValidEmailInput(form.Email, gettext("This value is not a valid email. It should be like name@domain.com.", form.locale))
	}
	validator.CheckRequiredInput(form.Name, gettext("Name can not be empty.", form.locale))
	validator.CheckPasswordConfirmation(form.Password, form.PasswordConfirm, gettext("Confirmation does not match password.", form.locale))
	validator.CheckValidSelectOption(form.Language, gettext("Selected language is not valid.", form.locale))
	return validator.AllOK()
}

func ProfileHandler() http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		user := getUser(r)
		conn := getConn(r)
		locale := getLocale(r)
		form := newProfileForm(r.Context(), conn, locale)
		if r.Method == "POST" {
			if err := form.Parse(r); err != nil {
				http.Error(w, err.Error(), http.StatusBadRequest)
				return
			}
			if err := verifyCsrfTokenValid(r); err != nil {
				http.Error(w, err.Error(), http.StatusForbidden)
				return
			}
			if ok := form.Validate(); ok {
				//goland:noinspection SqlWithoutWhere
				cookie := conn.MustGetText(r.Context(), "", "update user_profile set name = $1, email = $2, lang_tag = $3 returning build_cookie()", form.Name, form.Email, form.Language)
				setSessionCookie(w, cookie)
				if form.Password.Val != "" {
					conn.MustExec(r.Context(), "select change_password($1)", form.Password)
				}
				company := getCompany(r)
				http.Redirect(w, r, "/company/"+company.Slug+"/profile", http.StatusSeeOther)
				return
			}
			w.WriteHeader(http.StatusUnprocessableEntity)
		} else {
			form.Name.Val = conn.MustGetText(r.Context(), "", "select name from user_profile")
			form.Email.Val = user.Email
			form.Language.Selected = user.Language.String()
		}
		mustRenderAppTemplate(w, r, "profile.gohtml", form)
	})
}