core/kg/model/user.go

package model

import (
	"regexp"
	"unicode"

	"github.com/pkg/errors"
	"golang.org/x/crypto/bcrypt"
)

const (
	userNameMaxLength  = 64
	userNameMinLength  = 1
	userEmailMaxLength = 128
)

// User contains the details about the user.
type User struct {
	ID                 string `json:"id"`
	CreateAt           int64  `json:"create_at,omitempty"`
	UpdateAt           int64  `json:"update_at,omitempty"`
	DeleteAt           int64  `json:"delete_at"`
	Username           string `json:"username"`
	Password           string `json:"password,omitempty"`
	LastPasswordUpdate int64  `json:"last_password_update,omitempty"`
}

// IsValid validates the user and returns an error if it isn't configured
// correctly.
func (u *User) IsValid() error {
	if !isValidID(u.ID) {
		return invalidUserError("id", "")
	}

	if u.CreateAt == 0 {
		return invalidUserError("create_at", u.ID)
	}

	if u.UpdateAt == 0 {
		return invalidUserError("update_at", u.ID)
	}

	if !isValidUsername(u.Username) {
		return invalidUserError("username", u.ID)
	}

	return nil
}

// Clone clones the object
func (u *User) Clone() *User {
	user := *u
	return &user
}

// SanitizeInput removes input data from the user object that is not user controlled
func (u *User) SanitizeInput() {
	u.ID = ""
	u.CreateAt = 0
	u.UpdateAt = 0
	u.DeleteAt = 0
	u.LastPasswordUpdate = 0
}

// SanitizeOutput removes output data from the user object that is not user controlled
func (u *User) SanitizeOutput() {
	u.Password = ""
}

// HashPassword hashes user's password
func (u *User) HashPassword() {
	if u.Password == "" {
		return
	}

	hash, err := bcrypt.GenerateFromPassword([]byte(u.Password), 10)
	if err != nil {
		panic(err)
	}

	u.Password = string(hash)
}

func isValidID(value string) bool {
	if len(value) != 26 {
		return false
	}

	for _, r := range value {
		if !unicode.IsLetter(r) && !unicode.IsNumber(r) {
			return false
		}
	}

	return true
}

func invalidUserError(fieldName string, userID string) error {
	return errors.Errorf("Invalid User field: %s; id: %s", fieldName, userID)
}

func isValidUsername(s string) bool {
	if len(s) < userNameMinLength || len(s) > userNameMaxLength {
		return false
	}

	validUsernameChars := regexp.MustCompile(`^[a-z0-9\.\-_]+$`)
	if !validUsernameChars.MatchString(s) {
		return false
	}

	return true
}