Add: CreateBackendAccess function

go-backend/internal/controllers/user_Password.go

@@ -4,6 +4,7 @@ import (
 	"GoMembership/internal/constants"
 	"GoMembership/internal/utils"
 	"GoMembership/pkg/errors"
+	"fmt"
 	"net/http"
 	"strconv"
 
@@ -12,6 +13,55 @@ import (
 	"github.com/go-playground/validator/v10"
 )
 
+func (uc *UserController) CreatePasswordHandler(c *gin.Context) {
+
+	requestUser, err := uc.ExtractUserFromContext(c)
+	if err != nil {
+		utils.RespondWithError(c, err, "Error extracting user from context in UpdateHandler", http.StatusBadRequest, errors.Responses.Fields.User, errors.Responses.Keys.NoAuthToken)
+		return
+	}
+	if !utils.HasPrivilige(requestUser, constants.Priviliges.AccessControl) {
+		utils.RespondWithError(c, errors.ErrNotAuthorized, fmt.Sprintf("Not allowed to handle all users. RoleID(%v)<Privilige(%v)", requestUser.RoleID, constants.Priviliges.View), http.StatusForbidden, errors.Responses.Fields.User, errors.Responses.Keys.Unauthorized)
+		return
+	}
+	//
+	// Expected data from the user
+	var input struct {
+		User struct {
+			ID uint `json:"id" binding:"required,numeric"`
+		} `json:"user"`
+	}
+
+	if err := c.ShouldBindJSON(&input); err != nil {
+		utils.HandleValidationError(c, err)
+		return
+	}
+
+	// find user
+	db_user, err := uc.Service.GetUserByID(input.User.ID)
+	if err != nil {
+		utils.RespondWithError(c, err, "couldn't get user by id", http.StatusNotFound, errors.Responses.Fields.User, errors.Responses.Keys.NotFound)
+		return
+	}
+
+	// create token
+	token, err := uc.Service.HandlePasswordChangeRequest(db_user)
+	if err != nil {
+		utils.RespondWithError(c, err, "couldn't handle password change request", http.StatusInternalServerError, errors.Responses.Fields.General, errors.Responses.Keys.InternalServerError)
+		return
+	}
+
+	// send email
+	if err := uc.EmailService.SendGrantBackendAccessEmail(db_user, &token); err != nil {
+		utils.RespondWithError(c, err, "Couldn't send grant backend access email", http.StatusInternalServerError, errors.Responses.Fields.General, errors.Responses.Keys.InternalServerError)
+		return
+	}
+
+	c.JSON(http.StatusAccepted, gin.H{
+		"message": "password_change_requested",
+	})
+}
+
 func (uc *UserController) RequestPasswordChangeHandler(c *gin.Context) {
 
 	// Expected data from the user

go-backend/internal/controllers/user_controller.go

@@ -141,7 +141,7 @@ func (uc *UserController) DeleteUser(c *gin.Context) {
 
 	type deleteData struct {
 		User struct {
-			ID       uint   `json:"id"`
+			ID       uint   `json:"id" binding:"required,numeric"`
 			LastName string `json:"last_name"`
 		} `json:"user"`
 	}