zitadel/cmd/initialise/verify_user.go

package initialise

import (
	_ "embed"
	"fmt"

	"github.com/spf13/cobra"
	"github.com/spf13/viper"
	"github.com/zitadel/logging"

	"github.com/zitadel/zitadel/internal/database"
)

func newUser() *cobra.Command {
	return &cobra.Command{
		Use:   "user",
		Short: "initialize only the database user",
		Long: `Sets up the ZITADEL database user.

Prerequisites:
- cockroachDB or postgreSQL

The user provided by flags needs privileges to 
- create the database if it does not exist
- see other users and create a new one if the user does not exist
- grant all rights of the ZITADEL database to the user created if not yet set
`,
		Run: func(cmd *cobra.Command, args []string) {
			config := MustNewConfig(viper.GetViper())

			err := initialise(config.Database, VerifyUser(config.Database.Username(), config.Database.Password()))
			logging.OnError(err).Fatal("unable to init user")
		},
	}
}

func VerifyUser(username, password string) func(*database.DB) error {
	return func(db *database.DB) error {
		logging.WithFields("username", username).Info("verify user")

		if password != "" {
			createUserStmt += " WITH PASSWORD '" + password + "'"
		}

		return exec(db, fmt.Sprintf(createUserStmt, username), []string{roleAlreadyExistsCode})
	}
}