From 4082fc6ea1d3976f76a0190112d99c73dd1419fb Mon Sep 17 00:00:00 2001
From: Santo Cariotti <santo@dcariotti.me>
Date: Tue, 3 Sep 2024 12:44:45 +0200
Subject: Add user query used to find an user by id

---
 src/graphql/types/user.rs | 56 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)

(limited to 'src/graphql/types')

diff --git a/src/graphql/types/user.rs b/src/graphql/types/user.rs
index 69ffc38..b185a16 100644
--- a/src/graphql/types/user.rs
+++ b/src/graphql/types/user.rs
@@ -91,6 +91,62 @@ pub async fn get_users<'ctx>(
     }
 }
 
+/// Get users from the database
+pub async fn get_user_by_id<'ctx>(ctx: &Context<'ctx>, id: i32) -> Result<User, String> {
+    let state = ctx.data::<AppState>().expect("Can't connect to db");
+    let client = &*state.client;
+    let auth: &Authentication = ctx.data().unwrap();
+    match auth {
+        Authentication::NotLogged => Err("Unauthorized".to_string()),
+        Authentication::Logged(claims) => {
+            let claim_user = find_user(client, claims.user_id)
+                .await
+                .expect("Should not be here");
+
+            let rows;
+            if claim_user.is_admin {
+                rows = client
+                    .query(
+                        "SELECT id, email, password, name, address, is_admin FROM users
+                            WHERE id = $1",
+                        &[&id],
+                    )
+                    .await
+                    .unwrap();
+            } else if claims.user_id != id {
+                return Err("Unauthorized".to_string());
+            } else {
+                rows = client
+                    .query(
+                        "SELECT id, email, password, name, address, is_admin FROM users
+                            WHERE id = $1",
+                        &[&claims.user_id],
+                    )
+                    .await
+                    .unwrap();
+            }
+
+            let users: Vec<User> = rows
+                .iter()
+                .map(|row| User {
+                    id: row.get("id"),
+                    email: row.get("email"),
+                    password: row.get("password"),
+                    name: row.get("name"),
+                    address: row.get("address"),
+                    is_admin: row.get("is_admin"),
+                })
+                .collect();
+
+            if users.len() == 0 {
+                return Err("Not found".to_string());
+            }
+
+            Ok(users[0].clone())
+        }
+    }
+}
+
 /// Find an user with id = `id` using the PostgreSQL `client`
 pub async fn find_user(client: &Client, id: i32) -> Result<User, AppError> {
     let rows = client
-- 
cgit v1.2.3-71-g8e6c