zitadel/internal/v2/business/iam/member.go

package iam

import (
	"context"

	"github.com/caos/zitadel/internal/errors"
	caos_errs "github.com/caos/zitadel/internal/errors"
	iam_model "github.com/caos/zitadel/internal/iam/model"
	iam_repo "github.com/caos/zitadel/internal/v2/repository/iam"
)

func (r *Repository) AddIAMMember(ctx context.Context, member *iam_model.IAMMember) (*iam_model.IAMMember, error) {
	if !member.IsValid() {
		return nil, caos_errs.ThrowPreconditionFailed(nil, "IAM-W8m4l", "Errors.IAM.MemberInvalid")
	}

	iam, err := r.iamByID(ctx, member.AggregateID)
	if err != nil {
		return nil, err
	}

	idx, _ := iam.Members.MemberByUserID(member.UserID)
	if idx > -1 {
		return nil, caos_errs.ThrowPreconditionFailed(nil, "IAM-GPhuz", "Errors.IAM.MemberAlreadyExisting")
	}

	iamAgg := iam_repo.AggregateFromReadModel(iam).
		PushMemberAdded(ctx, member.UserID, member.Roles...)

	events, err := r.eventstore.PushAggregates(ctx, iamAgg)
	if err != nil {
		return nil, err
	}

	if err = iam.AppendAndReduce(events...); err != nil {
		return nil, err
	}

	_, addedMember := iam.Members.MemberByUserID(member.UserID)
	if member == nil {
		return nil, errors.ThrowInternal(nil, "IAM-nuoDN", "member not saved")
	}
	return readModelToMember(addedMember), nil
}

//ChangeIAMMember updates an existing member
//TODO: refactor to ChangeMember
func (r *Repository) ChangeIAMMember(ctx context.Context, member *iam_model.IAMMember) (*iam_model.IAMMember, error) {
	if !member.IsValid() {
		return nil, caos_errs.ThrowPreconditionFailed(nil, "IAM-LiaZi", "Errors.IAM.MemberInvalid")
	}

	existingMember, err := r.memberWriteModelByID(ctx, member.AggregateID, member.UserID)
	if err != nil {
		return nil, err
	}

	changedMember := *existingMember
	changedMember.Roles = member.Roles

	iam := iam_repo.AggregateFromWriteModel(&existingMember.WriteModel.WriteModel).
		PushMemberChanged(ctx, existingMember, &changedMember)

	events, err := r.eventstore.PushAggregates(ctx, iam)
	if err != nil {
		return nil, err
	}

	if err = existingMember.AppendEvents(events...); err != nil {
		return nil, err
	}
	if err = existingMember.Reduce(); err != nil {
		return nil, err
	}

	return nil, nil
}

func (r *Repository) RemoveIAMMember(ctx context.Context, member *iam_model.IAMMember) error {
	iam, err := r.iamByID(ctx, member.AggregateID)
	if err != nil {
		return err
	}

	i, _ := iam.Members.MemberByUserID(member.UserID)
	if i == -1 {
		return nil
	}

	iamAgg := iam_repo.AggregateFromReadModel(iam).
		PushEvents(iam_repo.NewMemberRemovedEvent(ctx, member.UserID))

	events, err := r.eventstore.PushAggregates(ctx, iamAgg)
	if err != nil {
		return err
	}

	return iam.AppendAndReduce(events...)
}