databag/net/server/internal/api_removeAgentToken.go
2023-06-26 17:06:55 -07:00

75 lines
2.0 KiB
Go

package databag
import (
"databag/internal/store"
"gorm.io/gorm"
"net/http"
"errors"
)
//RemoveAgentToken
func RemoveAgentToken(w http.ResponseWriter, r *http.Request) {
// logout of all devices
logoutMode := r.FormValue("all") == "true"
// parse authentication token
target, access, err := ParseToken(r.FormValue("agent"))
if err != nil {
ErrResponse(w, http.StatusBadRequest, err);
return
}
if logoutMode {
var sessions []store.Session
if err = store.DB.Where("account_id = ?", target, access).Find(&sessions).Error; err != nil {
ErrResponse(w, http.StatusInternalServerError, err);
return;
}
// delete all sessions
err = store.DB.Transaction(func(tx *gorm.DB) error {
for _, session := range sessions {
if res := tx.Where("session_id = ?", session.ID).Delete(&store.PushEvent{}).Error; res != nil {
return res
}
if res := tx.Where("id = ?", session.ID).Delete(&store.Session{}).Error; res != nil {
return res
}
}
return nil
})
if err != nil {
ErrResponse(w, http.StatusInternalServerError, err)
return
}
} else {
var session store.Session
if err = store.DB.Where("account_id = ? AND token = ?", target, access).Find(&session).Error; err != nil {
if errors.Is(err, gorm.ErrRecordNotFound) {
ErrResponse(w, http.StatusNotFound, err);
} else {
ErrResponse(w, http.StatusInternalServerError, err);
}
return;
}
// delete session
err = store.DB.Transaction(func(tx *gorm.DB) error {
if res := tx.Where("session_id = ?", session.ID).Delete(&store.PushEvent{}).Error; res != nil {
return res
}
if res := tx.Where("id = ?", session.ID).Delete(&store.Session{}).Error; res != nil {
return res
}
return nil
})
if err != nil {
ErrResponse(w, http.StatusInternalServerError, err)
return
}
}
WriteResponse(w, nil)
}