From 55494f0d1f6d3106ba61a966423af9e80e034749 Mon Sep 17 00:00:00 2001
From: metamuffin <metamuffin@disroot.org>
Date: Wed, 4 Oct 2023 10:51:00 +0200
Subject: user management on dedicated page

---
 server/src/routes/ui/admin/user.rs | 98 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 98 insertions(+)
 create mode 100644 server/src/routes/ui/admin/user.rs

(limited to 'server/src/routes/ui/admin/user.rs')

diff --git a/server/src/routes/ui/admin/user.rs b/server/src/routes/ui/admin/user.rs
new file mode 100644
index 0000000..9868343
--- /dev/null
+++ b/server/src/routes/ui/admin/user.rs
@@ -0,0 +1,98 @@
+use crate::{
+    database::Database,
+    routes::ui::{
+        account::session::AdminSession,
+        error::MyResult,
+        layout::{DynLayoutPage, FlashDisplay, LayoutPage},
+    },
+    uri,
+};
+use anyhow::anyhow;
+use rocket::{form::Form, get, post, FromForm, State};
+
+#[get("/admin/users")]
+pub fn r_admin_users(
+    _session: AdminSession,
+    database: &State<Database>,
+) -> MyResult<DynLayoutPage<'static>> {
+    user_management(database, None)
+}
+
+fn user_management<'a>(
+    database: &Database,
+    flash: Option<MyResult<String>>,
+) -> MyResult<DynLayoutPage<'a>> {
+    // TODO this doesnt scale, pagination!
+    let users = database.user.iter().collect::<Result<Vec<_>, _>>()?;
+    let flash = flash.map(|f| f.map_err(|e| format!("{e:?}")));
+
+    Ok(LayoutPage {
+        title: "User management".to_string(),
+        content: markup::new! {
+            h1 { "User Management" }
+            @FlashDisplay { flash: flash.clone() }
+            h2 { "All Users" }
+            ul { @for (_, u) in &users {
+                li {
+                    a[href=uri!(r_admin_user(&u.name))] { @format!("{:?}", u.display_name) " (" @u.name ")" }
+                }
+            }}
+        },
+        ..Default::default()
+    })
+}
+
+#[get("/admin/user/<name>")]
+pub fn r_admin_user<'a>(
+    _session: AdminSession,
+    database: &State<Database>,
+    name: &'a str,
+) -> MyResult<DynLayoutPage<'a>> {
+    manage_single_user(database, None, name)
+}
+
+fn manage_single_user<'a>(
+    database: &Database,
+    flash: Option<MyResult<String>>,
+    name: &'a str,
+) -> MyResult<DynLayoutPage<'a>> {
+    // TODO this doesnt scale, pagination!
+    let user = database
+        .user
+        .get(&name.to_string())?
+        .ok_or(anyhow!("user does not exist"))?;
+    let flash = flash.map(|f| f.map_err(|e| format!("{e:?}")));
+
+    Ok(LayoutPage {
+        title: "User management".to_string(),
+        content: markup::new! {
+            h1 { "Manage User" }
+            @FlashDisplay { flash: flash.clone() }
+            h2 { @format!("{:?}", user.display_name) " (" @user.name ")" }
+            form[method="POST", action=uri!(r_admin_remove_user())] {
+                input[type="text", name="name", value=&user.name, hidden];
+                input[type="submit", value="Remove(!)"];
+            }
+        },
+        ..Default::default()
+    })
+}
+
+#[derive(FromForm)]
+pub struct DeleteUser {
+    name: String,
+}
+
+#[post("/admin/remove_user", data = "<form>")]
+pub fn r_admin_remove_user(
+    session: AdminSession,
+    database: &State<Database>,
+    form: Form<DeleteUser>,
+) -> MyResult<DynLayoutPage<'static>> {
+    drop(session);
+    database
+        .user
+        .remove(&form.name)?
+        .ok_or(anyhow!("user did not exist"))?;
+    user_management(database, Some(Ok("User removed".into())))
+}
-- 
cgit v1.2.3-70-g09d2