169 lines
4.4 KiB
MySQL
169 lines
4.4 KiB
MySQL
|
drop function if exists "public"."usr_session_touch"(session usr_session_key);
|
||
|
|
||
|
set check_function_bodies = off;
|
||
|
|
||
|
CREATE OR REPLACE FUNCTION public.usr_groups(of_usr human_uuid.huid)
|
||
|
RETURNS SETOF grp
|
||
|
LANGUAGE plpgsql
|
||
|
STABLE
|
||
|
AS $function$
|
||
|
begin
|
||
|
return query select g.*
|
||
|
from public.usr u
|
||
|
inner join public.grp_usr gu on gu.usr = u.id
|
||
|
inner join public.grp g on g.id = gu.grp
|
||
|
where u.uid = of_usr;
|
||
|
end;
|
||
|
$function$
|
||
|
;
|
||
|
|
||
|
CREATE OR REPLACE FUNCTION public.usr_session_touch(touch_key usr_session_key)
|
||
|
RETURNS usr
|
||
|
LANGUAGE plpgsql
|
||
|
AS $function$
|
||
|
declare
|
||
|
session public.usr_session;
|
||
|
session_usr public.usr;
|
||
|
new_exp timestamp;
|
||
|
begin
|
||
|
select s.*
|
||
|
from public.usr_session s
|
||
|
where s.key = touch_key
|
||
|
into session;
|
||
|
|
||
|
if session is null then
|
||
|
raise exception 'usr_session_invalid';
|
||
|
end if;
|
||
|
|
||
|
if session.expires_at <= now() then
|
||
|
raise exception 'usr_session_expired';
|
||
|
end if;
|
||
|
|
||
|
if session.remembered then
|
||
|
new_exp := now() + interval '1 week';
|
||
|
else
|
||
|
new_exp := now() + interval '1 hour';
|
||
|
end if;
|
||
|
|
||
|
update public.usr_session as s
|
||
|
set expires_at = new_exp
|
||
|
where s.id = session.id;
|
||
|
|
||
|
select u.*
|
||
|
from public.usr u
|
||
|
where u.id = session.usr
|
||
|
into session_usr;
|
||
|
|
||
|
return session_usr;
|
||
|
end;
|
||
|
$function$
|
||
|
;
|
||
|
|
||
|
CREATE OR REPLACE FUNCTION public.do_insert_grp_perm()
|
||
|
RETURNS trigger
|
||
|
LANGUAGE plpgsql
|
||
|
AS $function$
|
||
|
begin
|
||
|
insert into public.perm
|
||
|
(path, owner_user, owner_group, owner_user_mode, owner_group_mode, everyone_mode)
|
||
|
values
|
||
|
('/groups/' || human_uuid.huid_to_string(NEW.uid) || '/members', (public.get_acting_usr()).id, NEW.id, 'w', 'w', '-')
|
||
|
, ('/groups/' || human_uuid.huid_to_string(NEW.uid) || '/name', (public.get_acting_usr()).id, NEW.id, 'w', 'w', 'r')
|
||
|
;
|
||
|
|
||
|
return new;
|
||
|
end;
|
||
|
$function$
|
||
|
;
|
||
|
|
||
|
CREATE OR REPLACE FUNCTION public.do_usr_create_default_grp()
|
||
|
RETURNS trigger
|
||
|
LANGUAGE plpgsql
|
||
|
AS $function$
|
||
|
declare
|
||
|
name public.grp_tag := grp_tag_of_string('usr_' || new.uid);
|
||
|
new_grp public.grp;
|
||
|
begin
|
||
|
insert into public.grp
|
||
|
(tag)
|
||
|
values
|
||
|
(name)
|
||
|
returning * into new_grp;
|
||
|
|
||
|
perform public.grp_add_member(to_grp => new_grp.id, add_usr => new.id);
|
||
|
|
||
|
update public.perm
|
||
|
set owner_user = NEW.id
|
||
|
, owner_group = (public.grp_admins()).id
|
||
|
, owner_user_mode = 'r' :: public.perm_mode
|
||
|
where path = '/groups/' || (new_grp.uid :: text) || '/members'
|
||
|
or path = '/groups/' || (new_grp.uid :: text) || '/name';
|
||
|
|
||
|
return null;
|
||
|
end;
|
||
|
$function$
|
||
|
;
|
||
|
|
||
|
CREATE OR REPLACE FUNCTION public.do_usr_session_immutable_columns()
|
||
|
RETURNS trigger
|
||
|
LANGUAGE plpgsql
|
||
|
AS $function$
|
||
|
begin
|
||
|
if OLD.id <> NEW.id then
|
||
|
raise exception 'immutable_field'
|
||
|
using detail = 'public.usr_session.id is immutable',
|
||
|
errcode = 'restrict_violation';
|
||
|
elsif OLD.key <> NEW.key then
|
||
|
raise exception 'immutable_field'
|
||
|
using detail = 'public.usr_session.key is immutable',
|
||
|
errcode = 'restrict_violation';
|
||
|
elsif OLD.usr <> NEW.usr then
|
||
|
raise exception 'immutable_field'
|
||
|
using detail = 'public.usr_session.usr is immutable',
|
||
|
errcode = 'restrict_violation';
|
||
|
elsif OLD.location <> NEW.location then
|
||
|
raise exception 'immutable_field'
|
||
|
using detail = 'public.usr_session.location is immutable',
|
||
|
errcode = 'restrict_violation';
|
||
|
elsif OLD.device <> NEW.device then
|
||
|
raise exception 'immutable_field'
|
||
|
using detail = 'public.usr_session.device is immutable',
|
||
|
errcode = 'restrict_violation';
|
||
|
elsif OLD.ip <> NEW.ip then
|
||
|
raise exception 'immutable_field'
|
||
|
using detail = 'public.usr_session.ip is immutable',
|
||
|
errcode = 'restrict_violation';
|
||
|
end if;
|
||
|
|
||
|
return NEW;
|
||
|
end;
|
||
|
$function$
|
||
|
;
|
||
|
|
||
|
CREATE OR REPLACE FUNCTION public.usr_session_login(tag_or_email usr_tag_or_email, password text, remember boolean DEFAULT false, location text DEFAULT NULL::text, device usr_session_device DEFAULT NULL::usr_session_device, ip inet DEFAULT NULL::inet)
|
||
|
RETURNS usr_session_key
|
||
|
LANGUAGE plpgsql
|
||
|
AS $function$
|
||
|
declare
|
||
|
usr public.usr;
|
||
|
key public.usr_session_key := usr_session_key_gen();
|
||
|
expires_at timestamp;
|
||
|
begin
|
||
|
usr := public.usr_session_login_validate(tag_or_email, password);
|
||
|
|
||
|
if remember then
|
||
|
expires_at := now() + interval '1 week';
|
||
|
else
|
||
|
expires_at := now() + interval '1 hour';
|
||
|
end if;
|
||
|
|
||
|
insert into public.usr_session
|
||
|
(key, expires_at, usr, remembered, location, device, ip)
|
||
|
values
|
||
|
(key, expires_at, usr.id, coalesce(remember, false), location, device, ip);
|
||
|
|
||
|
return key;
|
||
|
end;
|
||
|
$function$
|
||
|
;
|