Перенести все админские эндпоинты на порт 8445 и добавить отдельную авторизацию для админов. Часть 1

src/handlers/admin/admin_handler_moderation.erl

@@ -0,0 +1,154 @@
+-module(admin_handler_moderation).
+-behaviour(cowboy_handler).
+-export([init/2]).
+
+-include("records.hrl").
+
+-define(VALID_TARGETS, [<<"calendar">>, <<"event">>, <<"review">>, <<"user">>]).
+
+init(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"PUT">> -> moderate(Req);
+    _         -> send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+moderate(Req) ->
+  case auth_admin(Req) of
+    {ok, _AdminId, Req1} ->
+      TargetType = cowboy_req:binding(target_type, Req1),
+      TargetId   = cowboy_req:binding(id, Req1),
+      case lists:member(TargetType, ?VALID_TARGETS) of
+        true ->
+          {ok, Body, Req2} = cowboy_req:read_body(Req1),
+          try jsx:decode(Body, [return_maps]) of
+            #{<<"action">> := Action} ->
+              apply_moderation(TargetType, TargetId, Action, Req2);
+            _ ->
+              send_error(Req2, 400, <<"Missing 'action' field">>)
+          catch
+            _:_ -> send_error(Req2, 400, <<"Invalid JSON">>)
+          end;
+        false ->
+          send_error(Req1, 400, <<"Invalid target_type">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+apply_moderation(<<"calendar">>, Id, Action, Req) ->
+  handle_calendar(Id, Action, Req);
+apply_moderation(<<"event">>, Id, Action, Req) ->
+  handle_event(Id, Action, Req);
+apply_moderation(<<"review">>, Id, Action, Req) ->
+  handle_review(Id, Action, Req);
+apply_moderation(<<"user">>, Id, Action, Req) ->
+  handle_user(Id, Action, Req).
+
+handle_calendar(Id, <<"freeze">>, Req) ->
+  case core_calendar:freeze(Id) of
+    {ok, Calendar} -> send_json(Req, 200, calendar_to_json(Calendar));
+    {error, not_found} -> send_error(Req, 404, <<"Calendar not found">>)
+  end;
+handle_calendar(Id, <<"unfreeze">>, Req) ->
+  case core_calendar:unfreeze(Id) of
+    {ok, Calendar} -> send_json(Req, 200, calendar_to_json(Calendar));
+    {error, not_found} -> send_error(Req, 404, <<"Calendar not found">>)
+  end;
+handle_calendar(_Id, _Action, Req) ->
+  send_error(Req, 400, <<"Invalid action for calendar">>).
+
+handle_event(Id, <<"freeze">>, Req) ->
+  case core_event:freeze(Id) of
+    {ok, Event} -> send_json(Req, 200, event_to_json(Event));
+    {error, not_found} -> send_error(Req, 404, <<"Event not found">>)
+  end;
+handle_event(Id, <<"unfreeze">>, Req) ->
+  case core_event:unfreeze(Id) of
+    {ok, Event} -> send_json(Req, 200, event_to_json(Event));
+    {error, not_found} -> send_error(Req, 404, <<"Event not found">>)
+  end;
+handle_event(_Id, _Action, Req) ->
+  send_error(Req, 400, <<"Invalid action for event">>).
+
+handle_review(Id, <<"hide">>, Req) ->
+  case core_review:hide(Id) of
+    {ok, Review} -> send_json(Req, 200, review_to_json(Review));
+    {error, not_found} -> send_error(Req, 404, <<"Review not found">>)
+  end;
+handle_review(Id, <<"show">>, Req) ->
+  case core_review:show(Id) of
+    {ok, Review} -> send_json(Req, 200, review_to_json(Review));
+    {error, not_found} -> send_error(Req, 404, <<"Review not found">>)
+  end;
+handle_review(_Id, _Action, Req) ->
+  send_error(Req, 400, <<"Invalid action for review">>).
+
+handle_user(Id, <<"block">>, Req) ->
+  case core_user:block(Id) of
+    {ok, User} -> send_json(Req, 200, user_to_json(User));
+    {error, not_found} -> send_error(Req, 404, <<"User not found">>)
+  end;
+handle_user(Id, <<"unblock">>, Req) ->
+  case core_user:unblock(Id) of
+    {ok, User} -> send_json(Req, 200, user_to_json(User));
+    {error, not_found} -> send_error(Req, 404, <<"User not found">>)
+  end;
+handle_user(_Id, _Action, Req) ->
+  send_error(Req, 400, <<"Invalid action for user">>).
+
+auth_admin(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, AdminId, Req1} ->
+      case is_admin(AdminId) of
+        true  -> {ok, AdminId, Req1};
+        false -> {error, 403, <<"Admin access required">>, Req1}
+      end;
+    {error, Code, Message, Req1} ->
+      {error, Code, Message, Req1}
+  end.
+
+is_admin(UserId) ->
+  case core_user:get_by_id(UserId) of
+    {ok, User} ->
+      Role = User#user.role,
+      Role =:= admin orelse Role =:= superadmin orelse
+        Role =:= moderator orelse Role =:= support;
+    _ -> false
+  end.
+
+calendar_to_json(C) ->
+  #{
+    id     => C#calendar.id,
+    title  => C#calendar.title,
+    status => atom_to_binary(C#calendar.status, utf8)
+  }.
+
+event_to_json(E) ->
+  #{
+    id     => E#event.id,
+    title  => E#event.title,
+    status => atom_to_binary(E#event.status, utf8)
+  }.
+
+review_to_json(R) ->
+  #{
+    id     => R#review.id,
+    status => atom_to_binary(R#review.status, utf8)
+  }.
+
+user_to_json(U) ->
+  #{
+    id     => U#user.id,
+    email  => U#user.email,
+    status => atom_to_binary(U#user.status, utf8)
+  }.
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req),
+  {ok, Body, []}.
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req),
+  {ok, Body, []}.