feat: PATCH /v1/user/me — профиль и смена пароля. Refs EventHub/EventHubBack#48

src/logic/logic_user.erl

@@ -1,6 +1,7 @@
 -module(logic_user).
 
 -export([list_users_admin/2, get_user_admin/1, update_user_admin/2, delete_user_admin/1]).
+-export([update_me/2]).
 
 -include("records.hrl").
 
@@ -51,10 +52,139 @@ delete_user_admin(UserId) ->
       Error
   end.
 
+%%%-------------------------------------------------------------------
+%%% @doc Обновление собственного профиля (whitelist + смена пароля).
+%%% BodyMap — JSON map с бинарными ключами.
+%%% @end
+%%%-------------------------------------------------------------------
+-spec update_me(UserId :: binary(), BodyMap :: map()) ->
+  {ok, #user{}} | {error, term()}.
+update_me(UserId, BodyMap) when is_map(BodyMap) ->
+  case parse_me_body(BodyMap) of
+    {error, _} = Err ->
+      Err;
+    {ok, ProfileUpdates, PasswordOpt} ->
+      case core_user:get_by_id(UserId) of
+        {error, _} = Err ->
+          Err;
+        {ok, #user{status = Status}} when Status =/= active ->
+          {error, forbidden};
+        {ok, User} ->
+          case apply_password_change(User, PasswordOpt) of
+            {error, _} = Err ->
+              Err;
+            {ok, PassUpdates} ->
+              Updates = ProfileUpdates ++ PassUpdates,
+              case Updates of
+                [] ->
+                  {error, empty_body};
+                _ ->
+                  core_user:update(UserId, Updates)
+              end
+          end
+      end
+  end;
+update_me(_, _) ->
+  {error, invalid_json}.
+
 %%%===================================================================
 %%% Внутренние функции
 %%%===================================================================
 
+-define(ME_KEYS, [<<"language">>, <<"nickname">>, <<"timezone">>, <<"phone">>,
+  <<"avatar_url">>, <<"preferences">>, <<"password">>, <<"current_password">>]).
+
+parse_me_body(BodyMap) ->
+  case maps:keys(BodyMap) -- ?ME_KEYS of
+    [_ | _] ->
+      {error, unknown_field};
+    [] ->
+      case parse_password_pair(BodyMap) of
+        {error, _} = Err ->
+          Err;
+        {ok, PasswordOpt} ->
+          case parse_profile_fields(BodyMap) of
+            {error, _} = Err ->
+              Err;
+            {ok, ProfileUpdates} ->
+              {ok, ProfileUpdates, PasswordOpt}
+          end
+      end
+  end.
+
+parse_password_pair(BodyMap) ->
+  HasNew = maps:is_key(<<"password">>, BodyMap),
+  HasCur = maps:is_key(<<"current_password">>, BodyMap),
+  case {HasNew, HasCur} of
+    {false, false} ->
+      {ok, undefined};
+    {true, true} ->
+      New = maps:get(<<"password">>, BodyMap),
+      Cur = maps:get(<<"current_password">>, BodyMap),
+      case {New, Cur} of
+        {N, C} when is_binary(N), N =/= <<>>, is_binary(C), C =/= <<>> ->
+          {ok, {C, N}};
+        _ ->
+          {error, invalid_password}
+      end;
+    _ ->
+      {error, password_pair_required}
+  end.
+
+parse_profile_fields(BodyMap) ->
+  Keys = [<<"language">>, <<"nickname">>, <<"timezone">>, <<"phone">>,
+    <<"avatar_url">>, <<"preferences">>],
+  try
+    Updates = lists:filtermap(fun(Key) ->
+      case maps:find(Key, BodyMap) of
+        error -> false;
+        {ok, Val} ->
+          case normalize_me_field(Key, Val) of
+            {ok, Atom, Norm} -> {true, {Atom, Norm}};
+            {error, Reason} -> throw({invalid_field, Reason})
+          end
+      end
+              end, Keys),
+    {ok, Updates}
+  catch
+    throw:{invalid_field, Reason} -> {error, Reason}
+  end.
+
+normalize_me_field(<<"language">>, <<"ru">>) -> {ok, language, <<"ru">>};
+normalize_me_field(<<"language">>, <<"en">>) -> {ok, language, <<"en">>};
+normalize_me_field(<<"language">>, _) -> {error, invalid_language};
+normalize_me_field(<<"nickname">>, null) -> {ok, nickname, <<>>};
+normalize_me_field(<<"nickname">>, V) when is_binary(V) -> {ok, nickname, V};
+normalize_me_field(<<"nickname">>, _) -> {error, invalid_nickname};
+normalize_me_field(<<"timezone">>, null) -> {ok, timezone, <<>>};
+normalize_me_field(<<"timezone">>, V) when is_binary(V) -> {ok, timezone, V};
+normalize_me_field(<<"timezone">>, _) -> {error, invalid_timezone};
+normalize_me_field(<<"phone">>, null) -> {ok, phone, <<>>};
+normalize_me_field(<<"phone">>, V) when is_binary(V) -> {ok, phone, V};
+normalize_me_field(<<"phone">>, _) -> {error, invalid_phone};
+normalize_me_field(<<"avatar_url">>, null) -> {ok, avatar_url, <<>>};
+normalize_me_field(<<"avatar_url">>, V) when is_binary(V) -> {ok, avatar_url, V};
+normalize_me_field(<<"avatar_url">>, _) -> {error, invalid_avatar_url};
+normalize_me_field(<<"preferences">>, null) -> {ok, preferences, #{}};
+normalize_me_field(<<"preferences">>, V) when is_map(V) -> {ok, preferences, V};
+normalize_me_field(<<"preferences">>, _) -> {error, invalid_preferences};
+normalize_me_field(_, _) -> {error, unknown_field}.
+
+apply_password_change(_User, undefined) ->
+  {ok, []};
+apply_password_change(#user{password_hash = Hash}, {Current, New}) ->
+  case logic_auth:verify_password(Current, Hash) of
+    {ok, true} ->
+      case logic_auth:hash_password(New) of
+        {ok, NewHash} ->
+          {ok, [{password_hash, NewHash}]};
+        _ ->
+          {error, password_hash_failed}
+      end;
+    _ ->
+      {error, wrong_password}
+  end.
+
 apply_filters(Users, Filters) ->
   Role = maps:get(role, Filters, undefined),
   StatusBin = maps:get(status, Filters, undefined),
@@ -106,4 +236,4 @@ validate_user_update({timezone, V}) when is_binary(V); V =:= undefined -> true;
 validate_user_update({language, V}) when is_binary(V); V =:= undefined -> true;
 validate_user_update({phone, V}) when is_binary(V); V =:= undefined -> true;
 validate_user_update({preferences, V}) when is_map(V); V =:= undefined -> true;
-validate_user_update(_) -> false.
+validate_user_update(_) -> false.