login/logout logic, breadcrumbs, initial ui stuff

backend/internal/models/user.go

@@ -7,6 +7,7 @@ type User struct {
 	Username  string `gorm:"not null"`
 	Password  string `gorm:"not null"`
 	IsAdmin   bool   `gorm:"not null"`
+	IsRoot    bool   `gorm:"not null"`
 	IsActive  bool   `gorm:"not null"`
 	CreatedAt time.Time
 	UpdatedAt time.Time

backend/internal/routes/routes.go

@@ -5,4 +5,5 @@ import "github.com/gin-gonic/gin"
 func RegisterRoutes(r *gin.Engine) {
 	rg := r.Group("/api")
 	RegisterAlbumRoutes(rg)
+	RegisterUserRoutes(rg)
 }

backend/internal/routes/user.go

@@ -10,23 +10,67 @@ import (
 func RegisterUserRoutes(rg *gin.RouterGroup) {
 	user := rg.Group("/user")
 	user.POST("/createUser", func(c *gin.Context) {
-		username := c.PostForm("username")
-		password := c.PostForm("password")
-		err := services.CreateUser(username, password)
+		var request struct {
+			Username string `json:"username"`
+			Password string `json:"password"`
+		}
+		if err := c.ShouldBindJSON(&request); err != nil {
+			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+			return
+		}
+		err := services.CreateUser(request.Username, request.Password)
 		if err != nil {
 			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
 			return
 		}
 		c.JSON(http.StatusOK, gin.H{"message": "User created successfully"})
 	})
+	user.POST("/setRootUser", func(c *gin.Context) {
+		var request struct {
+			Username string `json:"username"`
+		}
+		if err := c.ShouldBindJSON(&request); err != nil {
+			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+			return
+		}
+		err := services.SetRootUser(request.Username)
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+		c.JSON(http.StatusOK, gin.H{"message": "Root user set successfully"})
+	})
 	user.POST("/login", func(c *gin.Context) {
-		username := c.PostForm("username")
-		password := c.PostForm("password")
-		accessToken, err := services.Login(username, password)
+		var request struct {
+			Username string `json:"username"`
+			Password string `json:"password"`
+		}
+		if err := c.ShouldBindJSON(&request); err != nil {
+			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+			return
+		}
+		accessToken, err := services.Login(request.Username, request.Password)
 		if err != nil {
 			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
 			return
 		}
 		c.JSON(http.StatusOK, gin.H{"message": "Login successful", "accessToken": accessToken.Token})
 	})
+	user.GET("/rootUserExists", func(c *gin.Context) {
+		exists := services.RootUserExists()
+		c.JSON(http.StatusOK, gin.H{"exists": exists})
+	})
+	user.GET("/getUserData", func(c *gin.Context) {
+		authHeader := c.GetHeader("Authorization")
+		token := authHeader
+		if len(authHeader) > 7 && authHeader[:7] == "Bearer " {
+			token = authHeader[7:]
+		}
+		userData, err := services.GetUserData(token)
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
+			return
+		}
+		c.JSON(http.StatusOK, gin.H{"userData": userData})
+	})
 }

backend/internal/services/user.go

@@ -1,8 +1,10 @@
 package services
 
 import (
+	"fmt"
 	"log"
 
+	"github.com/google/uuid"
 	"github.com/wisplite/raster/internal/db"
 	"github.com/wisplite/raster/internal/models"
 	"golang.org/x/crypto/bcrypt"
@@ -14,10 +16,13 @@ func CreateUser(username string, password string) error {
 		log.Fatal("failed to hash password: ", err)
 		return err
 	}
+	userID := uuid.New().String()
 	user := models.User{
+		ID:       userID,
 		Username: username,
 		Password: string(hashedPassword),
 		IsAdmin:  false,
+		IsRoot:   false,
 		IsActive: false,
 	}
 	result := db.GetDB().Create(&user)
@@ -43,3 +48,52 @@ func Login(username string, password string) (models.AccessToken, error) {
 	}
 	return accessToken, nil
 }
+
+func RootUserExists() bool {
+	user := models.User{}
+	result := db.GetDB().First(&user, "is_root = ?", true)
+	if result.Error != nil {
+		return false
+	}
+	return true
+}
+
+func SetRootUser(username string) error {
+	user := models.User{}
+	if RootUserExists() {
+		return fmt.Errorf("root user already exists")
+	}
+	result := db.GetDB().First(&user, "username = ?", username)
+	if result.Error != nil {
+		return result.Error
+	}
+	user.IsRoot = true
+	user.IsAdmin = true
+	user.IsActive = true
+	result = db.GetDB().Save(&user)
+	if result.Error != nil {
+		return result.Error
+	}
+	return nil
+}
+
+func GetUserData(authToken string) (models.User, error) {
+	user := models.User{}
+	accessToken := models.AccessToken{}
+	result := db.GetDB().First(&accessToken, "token = ?", authToken)
+	if result.Error != nil {
+		return models.User{}, fmt.Errorf("invalid access token")
+	}
+	result = db.GetDB().First(&user, "id = ?", accessToken.UserID)
+	if result.Error != nil {
+		return models.User{}, fmt.Errorf("user not found")
+	}
+	userData := models.User{
+		ID:       user.ID,
+		Username: user.Username,
+		IsAdmin:  user.IsAdmin,
+		IsRoot:   user.IsRoot,
+		IsActive: user.IsActive,
+	}
+	return userData, nil
+}