website/auth/ldap.go

package auth

import (
	"bytes"
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"path"

	"git.phc.dm.unipi.it/phc/website/model"
)

// ldapUser represents an LDAP User, most fields are inherited from [auth.User]
type ldapUser struct {
	Uid       string `json:"username"`
	NumericId int    `json:"id"`
	Name      string `json:"name"`
	Surname   string `json:"surname"`
	Email     string `json:"email"`
	Role      string `json:"role"`
	Gecos     string `json:"gecos"`
}

// AsUser converts an [ldapUser] to an instance of [auth.User]
func (u ldapUser) AsUser() *model.User {
	return &model.User{
		Username: u.Uid,
		Name:     u.Name,
		Surname:  u.Surname,
		Email:    u.Email,
		FullName: u.Gecos,
	}
}

// LDAPAuthService just holds the remote host of the HTTP LDAP service to make requests to
type LDAPAuthService struct {
	Host string
}

func NewLDAPAuthService(host string) Service {
	return &LDAPAuthService{host}
}

// doGetRequest is a utility to make HTTP GET requests
func (a *LDAPAuthService) doGetRequest(url string, response interface{}) error {
	req, err := http.NewRequest(
		"GET", path.Join(a.Host, "poisson-ldap", url), bytes.NewBuffer([]byte("")),
	)

	if err != nil {
		log.Printf(`GET %q resulted in %v`, url, err)
		return err
	}

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Printf(`GET %q resulted in %v`, url, err)
		return err
	}

	if err := json.NewDecoder(res.Body).Decode(response); err != nil {
		log.Printf(`GET %q resulted in %v`, url, err)
		return err
	}

	return nil
}

// doPostRequest is a utility to make HTTP POST requests
func (a *LDAPAuthService) doPostRequest(url string, request interface{}, response interface{}) error {
	jsonStr, err := json.Marshal(request)
	if err != nil {
		return err
	}

	req, err := http.NewRequest("POST", path.Join(a.Host, "ldap", url), bytes.NewBuffer(jsonStr))
	if err != nil {
		return err
	}

	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		return err
	}

	return json.NewDecoder(res.Body).Decode(response)
}

func (a *LDAPAuthService) GetUser(username string) (*model.User, error) {
	var user ldapUser
	if err := a.doGetRequest(fmt.Sprintf("/user/%s", username), &user); err != nil {
		return nil, err
	}

	return user.AsUser(), nil
}

func (a *LDAPAuthService) GetUsers() ([]*model.User, error) {
	ldapUsers := []*ldapUser{}
	if err := a.doGetRequest("/users", &ldapUsers); err != nil {
		return nil, err
	}

	users := make([]*model.User, len(ldapUsers))
	for i, u := range ldapUsers {
		users[i] = u.AsUser()
	}

	return users, nil
}

func (a *LDAPAuthService) GetSession(token string) (*model.Session, error) {
	var response model.Session
	if err := a.doGetRequest(fmt.Sprintf("/session/%s", token), &response); err != nil {
		return nil, err
	}

	return &response, nil
}

func (a *LDAPAuthService) Login(username, password string) (*model.Session, error) {
	reqBody := map[string]interface{}{
		"username": username,
		"password": password,
	}

	var response model.Session
	if err := a.doPostRequest("/login", reqBody, &response); err != nil {
		return nil, err
	}

	return &response, nil
}