Add: CreateBackendAccess function

go-backend/internal/constants/constants.go

@@ -11,6 +11,7 @@ const (
 	AwaitingPaymentStatus
 	MailVerificationSubject        = "Nur noch ein kleiner Schritt!"
 	MailChangePasswordSubject      = "Passwort Änderung angefordert"
+	MailGrantBackendAccessSubject  = "Dein Dörpsmobil Hasloh e.V. Zugang"
 	MailRegistrationSubject        = "Neues Mitglied hat sich registriert"
 	MailWelcomeSubject             = "Willkommen beim Dörpsmobil Hasloh e.V."
 	MailContactSubject             = "Jemand hat das Kontaktformular gefunden"
@@ -62,15 +63,17 @@ var VerificationTypes = struct {
 }
 
 var Priviliges = struct {
-	View   int8
-	Create int8
-	Update int8
-	Delete int8
+	View          int8
+	Create        int8
+	Update        int8
+	Delete        int8
+	AccessControl int8
 }{
-	View:   2,
-	Update: 4,
-	Create: 4,
-	Delete: 4,
+	View:          2,
+	Update:        4,
+	Create:        4,
+	Delete:        4,
+	AccessControl: 8,
 }
 
 var Roles = struct {

go-backend/internal/controllers/user_Password.go

@@ -4,6 +4,7 @@ import (
 	"GoMembership/internal/constants"
 	"GoMembership/internal/utils"
 	"GoMembership/pkg/errors"
+	"fmt"
 	"net/http"
 	"strconv"
 
@@ -12,6 +13,55 @@ import (
 	"github.com/go-playground/validator/v10"
 )
 
+func (uc *UserController) CreatePasswordHandler(c *gin.Context) {
+
+	requestUser, err := uc.ExtractUserFromContext(c)
+	if err != nil {
+		utils.RespondWithError(c, err, "Error extracting user from context in UpdateHandler", http.StatusBadRequest, errors.Responses.Fields.User, errors.Responses.Keys.NoAuthToken)
+		return
+	}
+	if !utils.HasPrivilige(requestUser, constants.Priviliges.AccessControl) {
+		utils.RespondWithError(c, errors.ErrNotAuthorized, fmt.Sprintf("Not allowed to handle all users. RoleID(%v)<Privilige(%v)", requestUser.RoleID, constants.Priviliges.View), http.StatusForbidden, errors.Responses.Fields.User, errors.Responses.Keys.Unauthorized)
+		return
+	}
+	//
+	// Expected data from the user
+	var input struct {
+		User struct {
+			ID uint `json:"id" binding:"required,numeric"`
+		} `json:"user"`
+	}
+
+	if err := c.ShouldBindJSON(&input); err != nil {
+		utils.HandleValidationError(c, err)
+		return
+	}
+
+	// find user
+	db_user, err := uc.Service.GetUserByID(input.User.ID)
+	if err != nil {
+		utils.RespondWithError(c, err, "couldn't get user by id", http.StatusNotFound, errors.Responses.Fields.User, errors.Responses.Keys.NotFound)
+		return
+	}
+
+	// create token
+	token, err := uc.Service.HandlePasswordChangeRequest(db_user)
+	if err != nil {
+		utils.RespondWithError(c, err, "couldn't handle password change request", http.StatusInternalServerError, errors.Responses.Fields.General, errors.Responses.Keys.InternalServerError)
+		return
+	}
+
+	// send email
+	if err := uc.EmailService.SendGrantBackendAccessEmail(db_user, &token); err != nil {
+		utils.RespondWithError(c, err, "Couldn't send grant backend access email", http.StatusInternalServerError, errors.Responses.Fields.General, errors.Responses.Keys.InternalServerError)
+		return
+	}
+
+	c.JSON(http.StatusAccepted, gin.H{
+		"message": "password_change_requested",
+	})
+}
+
 func (uc *UserController) RequestPasswordChangeHandler(c *gin.Context) {
 
 	// Expected data from the user

go-backend/internal/controllers/user_controller.go

@@ -141,7 +141,7 @@ func (uc *UserController) DeleteUser(c *gin.Context) {
 
 	type deleteData struct {
 		User struct {
-			ID       uint   `json:"id"`
+			ID       uint   `json:"id" binding:"required,numeric"`
 			LastName string `json:"last_name"`
 		} `json:"user"`
 	}

go-backend/internal/routes/routes.go

@@ -25,6 +25,7 @@ func RegisterRoutes(router *gin.Engine, userController *controllers.UserControll
 		userRouter.POST("/users", userController.RegisterUser)
 		userRouter.GET("/users", userController.GetAllUsers)
 		userRouter.DELETE("/users", userController.DeleteUser)
+		userRouter.PATCH("/users/activate", userController.CreatePasswordHandler)
 		userRouter.GET("/subscriptions", membershipcontroller.GetSubscriptions)
 		userRouter.PUT("/subscriptions", membershipcontroller.UpdateHandler)
 		userRouter.POST("/subscriptions", membershipcontroller.RegisterSubscription)

go-backend/internal/services/email_service.go

@@ -87,6 +87,37 @@ func (s *EmailService) SendVerificationEmail(user *models.User, token *string) e
 	return s.SendEmail(user.Email, subject, body, "", "")
 
 }
+func (s *EmailService) SendGrantBackendAccessEmail(user *models.User, token *string) error {
+	// Prepare data to be injected into the template
+	data := struct {
+		FirstName     string
+		LastName      string
+		Token         string
+		BASEURL       string
+		FRONTEND_PATH string
+		UserID        uint
+	}{
+		FirstName:     user.FirstName,
+		LastName:      user.LastName,
+		Token:         *token,
+		FRONTEND_PATH: config.Site.FrontendPath,
+		BASEURL:       config.Site.BaseURL,
+		UserID:        user.ID,
+	}
+
+	subject := constants.MailGrantBackendAccessSubject
+	htmlBody, err := ParseTemplate("mail_grant_backend_access.tmpl", data)
+	if err != nil {
+		logger.Error.Print("Couldn't send grant backend access mail")
+		return err
+	}
+	plainBody, err := ParseTemplate("mail_grant_backend_access.txt.tmpl", data)
+	if err != nil {
+		logger.Error.Print("Couldn't parse password mail")
+		return err
+	}
+	return s.SendEmail(user.Email, subject, htmlBody, plainBody, "")
+}
 
 func (s *EmailService) SendChangePasswordEmail(user *models.User, token *string) error {
 	// Prepare data to be injected into the template