package query import ( "context" "database/sql" errs "errors" "strings" "sync" "time" sq "github.com/Masterminds/squirrel" "github.com/zitadel/logging" "golang.org/x/text/language" "github.com/zitadel/zitadel/internal/api/authz" "github.com/zitadel/zitadel/internal/api/call" "github.com/zitadel/zitadel/internal/database" "github.com/zitadel/zitadel/internal/domain" "github.com/zitadel/zitadel/internal/errors" "github.com/zitadel/zitadel/internal/eventstore/handler/v2" "github.com/zitadel/zitadel/internal/query/projection" "github.com/zitadel/zitadel/internal/telemetry/tracing" ) type Users struct { SearchResponse Users []*User } type User struct { ID string CreationDate time.Time ChangeDate time.Time ResourceOwner string Sequence uint64 State domain.UserState Type domain.UserType Username string LoginNames database.TextArray[string] PreferredLoginName string Human *Human Machine *Machine } type Human struct { FirstName string LastName string NickName string DisplayName string AvatarKey string PreferredLanguage language.Tag Gender domain.Gender Email domain.EmailAddress IsEmailVerified bool Phone domain.PhoneNumber IsPhoneVerified bool } type Profile struct { ID string CreationDate time.Time ChangeDate time.Time ResourceOwner string Sequence uint64 FirstName string LastName string NickName string DisplayName string AvatarKey string PreferredLanguage language.Tag Gender domain.Gender } type Email struct { ID string CreationDate time.Time ChangeDate time.Time ResourceOwner string Sequence uint64 Email domain.EmailAddress IsVerified bool } type Phone struct { ID string CreationDate time.Time ChangeDate time.Time ResourceOwner string Sequence uint64 Phone string IsVerified bool } type Machine struct { Name string Description string HasSecret bool AccessTokenType domain.OIDCTokenType } type NotifyUser struct { ID string CreationDate time.Time ChangeDate time.Time ResourceOwner string Sequence uint64 State domain.UserState Type domain.UserType Username string LoginNames database.TextArray[string] PreferredLoginName string FirstName string LastName string NickName string DisplayName string AvatarKey string PreferredLanguage language.Tag Gender domain.Gender LastEmail string VerifiedEmail string LastPhone string VerifiedPhone string PasswordSet bool } type UserSearchQueries struct { SearchRequest Queries []SearchQuery } var ( userTable = table{ name: projection.UserTable, instanceIDCol: projection.UserInstanceIDCol, } UserIDCol = Column{ name: projection.UserIDCol, table: userTable, } UserCreationDateCol = Column{ name: projection.UserCreationDateCol, table: userTable, } UserChangeDateCol = Column{ name: projection.UserChangeDateCol, table: userTable, } UserResourceOwnerCol = Column{ name: projection.UserResourceOwnerCol, table: userTable, } UserInstanceIDCol = Column{ name: projection.UserInstanceIDCol, table: userTable, } UserStateCol = Column{ name: projection.UserStateCol, table: userTable, } UserSequenceCol = Column{ name: projection.UserSequenceCol, table: userTable, } UserUsernameCol = Column{ name: projection.UserUsernameCol, table: userTable, isOrderByLower: true, } UserTypeCol = Column{ name: projection.UserTypeCol, table: userTable, } UserOwnerRemovedCol = Column{ name: projection.UserOwnerRemovedCol, table: userTable, } userLoginNamesTable = loginNameTable.setAlias("login_names") userLoginNamesUserIDCol = LoginNameUserIDCol.setTable(userLoginNamesTable) userLoginNamesNameCol = LoginNameNameCol.setTable(userLoginNamesTable) userLoginNamesInstanceIDCol = LoginNameInstanceIDCol.setTable(userLoginNamesTable) userLoginNamesOwnerRemovedUserCol = LoginNameOwnerRemovedUserCol.setTable(userLoginNamesTable) userLoginNamesOwnerRemovedPolicyCol = LoginNameOwnerRemovedPolicyCol.setTable(userLoginNamesTable) userLoginNamesOwnerRemovedDomainCol = LoginNameOwnerRemovedDomainCol.setTable(userLoginNamesTable) userLoginNamesListCol = Column{ name: "loginnames", table: userLoginNamesTable, } userLoginNamesLowerListCol = Column{ name: "loginnames_lower", table: userLoginNamesTable, } userPreferredLoginNameTable = loginNameTable.setAlias("preferred_login_name") userPreferredLoginNameUserIDCol = LoginNameUserIDCol.setTable(userPreferredLoginNameTable) userPreferredLoginNameCol = LoginNameNameCol.setTable(userPreferredLoginNameTable) userPreferredLoginNameIsPrimaryCol = LoginNameIsPrimaryCol.setTable(userPreferredLoginNameTable) userPreferredLoginNameInstanceIDCol = LoginNameInstanceIDCol.setTable(userPreferredLoginNameTable) userPreferredLoginNameOwnerRemovedUserCol = LoginNameOwnerRemovedUserCol.setTable(userPreferredLoginNameTable) userPreferredLoginNameOwnerRemovedPolicyCol = LoginNameOwnerRemovedPolicyCol.setTable(userPreferredLoginNameTable) userPreferredLoginNameOwnerRemovedDomainCol = LoginNameOwnerRemovedDomainCol.setTable(userPreferredLoginNameTable) ) var ( humanTable = table{ name: projection.UserHumanTable, instanceIDCol: projection.HumanUserInstanceIDCol, } // profile HumanUserIDCol = Column{ name: projection.HumanUserIDCol, table: humanTable, } HumanFirstNameCol = Column{ name: projection.HumanFirstNameCol, table: humanTable, isOrderByLower: true, } HumanLastNameCol = Column{ name: projection.HumanLastNameCol, table: humanTable, isOrderByLower: true, } HumanNickNameCol = Column{ name: projection.HumanNickNameCol, table: humanTable, isOrderByLower: true, } HumanDisplayNameCol = Column{ name: projection.HumanDisplayNameCol, table: humanTable, isOrderByLower: true, } HumanPreferredLanguageCol = Column{ name: projection.HumanPreferredLanguageCol, table: humanTable, } HumanGenderCol = Column{ name: projection.HumanGenderCol, table: humanTable, } HumanAvatarURLCol = Column{ name: projection.HumanAvatarURLCol, table: humanTable, } // email HumanEmailCol = Column{ name: projection.HumanEmailCol, table: humanTable, isOrderByLower: true, } HumanIsEmailVerifiedCol = Column{ name: projection.HumanIsEmailVerifiedCol, table: humanTable, } // phone HumanPhoneCol = Column{ name: projection.HumanPhoneCol, table: humanTable, } HumanIsPhoneVerifiedCol = Column{ name: projection.HumanIsPhoneVerifiedCol, table: humanTable, } ) var ( machineTable = table{ name: projection.UserMachineTable, instanceIDCol: projection.MachineUserInstanceIDCol, } MachineUserIDCol = Column{ name: projection.MachineUserIDCol, table: machineTable, } MachineNameCol = Column{ name: projection.MachineNameCol, table: machineTable, isOrderByLower: true, } MachineDescriptionCol = Column{ name: projection.MachineDescriptionCol, table: machineTable, } MachineHasSecretCol = Column{ name: projection.MachineHasSecretCol, table: machineTable, } MachineAccessTokenTypeCol = Column{ name: projection.MachineAccessTokenTypeCol, table: machineTable, } ) var ( notifyTable = table{ name: projection.UserNotifyTable, instanceIDCol: projection.NotifyInstanceIDCol, } NotifyUserIDCol = Column{ name: projection.NotifyUserIDCol, table: notifyTable, } NotifyEmailCol = Column{ name: projection.NotifyLastEmailCol, table: notifyTable, isOrderByLower: true, } NotifyVerifiedEmailCol = Column{ name: projection.NotifyVerifiedEmailCol, table: notifyTable, isOrderByLower: true, } NotifyPhoneCol = Column{ name: projection.NotifyLastPhoneCol, table: notifyTable, } NotifyVerifiedPhoneCol = Column{ name: projection.NotifyVerifiedPhoneCol, table: notifyTable, } NotifyPasswordSetCol = Column{ name: projection.NotifyPasswordSetCol, table: notifyTable, } ) func addUserWithoutOwnerRemoved(eq map[string]interface{}) { eq[UserOwnerRemovedCol.identifier()] = false eq[userLoginNamesOwnerRemovedUserCol.identifier()] = false eq[userLoginNamesOwnerRemovedPolicyCol.identifier()] = false eq[userLoginNamesOwnerRemovedDomainCol.identifier()] = false eq[userPreferredLoginNameOwnerRemovedUserCol.identifier()] = false eq[userPreferredLoginNameOwnerRemovedPolicyCol.identifier()] = false eq[userPreferredLoginNameOwnerRemovedDomainCol.identifier()] = false } func (q *Queries) GetUserByID(ctx context.Context, shouldTriggerBulk bool, userID string, withOwnerRemoved bool, queries ...SearchQuery) (user *User, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() if shouldTriggerBulk { triggerUserProjections(ctx) } query, scan := prepareUserQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserIDCol.identifier(): userID, UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { addUserWithoutOwnerRemoved(eq) } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-FBg21", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { user, err = scan(row) return err }, stmt, args...) return user, err } func (q *Queries) GetUser(ctx context.Context, shouldTriggerBulk bool, withOwnerRemoved bool, queries ...SearchQuery) (user *User, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() if shouldTriggerBulk { triggerUserProjections(ctx) } query, scan := prepareUserQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { addUserWithoutOwnerRemoved(eq) } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-Dnhr2", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { user, err = scan(row) return err }, stmt, args...) return user, err } func (q *Queries) GetHumanProfile(ctx context.Context, userID string, withOwnerRemoved bool, queries ...SearchQuery) (profile *Profile, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() query, scan := prepareProfileQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserIDCol.identifier(): userID, UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { eq[UserOwnerRemovedCol.identifier()] = false } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-Dgbg2", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { profile, err = scan(row) return err }, stmt, args...) return profile, err } func (q *Queries) GetHumanEmail(ctx context.Context, userID string, withOwnerRemoved bool, queries ...SearchQuery) (email *Email, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() query, scan := prepareEmailQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserIDCol.identifier(): userID, UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { eq[UserOwnerRemovedCol.identifier()] = false } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-BHhj3", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { email, err = scan(row) return err }, stmt, args...) return email, err } func (q *Queries) GetHumanPhone(ctx context.Context, userID string, withOwnerRemoved bool, queries ...SearchQuery) (phone *Phone, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() query, scan := preparePhoneQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserIDCol.identifier(): userID, UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { eq[UserOwnerRemovedCol.identifier()] = false } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-Dg43g", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { phone, err = scan(row) return err }, stmt, args...) return phone, err } func (q *Queries) GetNotifyUserByID(ctx context.Context, shouldTriggered bool, userID string, withOwnerRemoved bool, queries ...SearchQuery) (user *NotifyUser, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() if shouldTriggered { triggerUserProjections(ctx) } query, scan := prepareNotifyUserQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserIDCol.identifier(): userID, UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { addUserWithoutOwnerRemoved(eq) } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-Err3g", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { user, err = scan(row) return err }, stmt, args...) return user, err } func (q *Queries) GetNotifyUser(ctx context.Context, shouldTriggered bool, withOwnerRemoved bool, queries ...SearchQuery) (user *NotifyUser, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() if shouldTriggered { triggerUserProjections(ctx) } query, scan := prepareNotifyUserQuery(ctx, q.client) for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{ UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID(), } if !withOwnerRemoved { addUserWithoutOwnerRemoved(eq) } stmt, args, err := query.Where(eq).ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-Err3g", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { user, err = scan(row) return err }, stmt, args...) return user, err } func (q *Queries) SearchUsers(ctx context.Context, queries *UserSearchQueries, withOwnerRemoved bool) (users *Users, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() query, scan := prepareUsersQuery(ctx, q.client) eq := sq.Eq{UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID()} if !withOwnerRemoved { addUserWithoutOwnerRemoved(eq) } stmt, args, err := queries.toQuery(query).Where(eq). ToSql() if err != nil { return nil, errors.ThrowInternal(err, "QUERY-Dgbg2", "Errors.Query.SQLStatment") } err = q.client.QueryContext(ctx, func(rows *sql.Rows) error { users, err = scan(rows) return err }, stmt, args...) if err != nil { return nil, errors.ThrowInternal(err, "QUERY-AG4gs", "Errors.Internal") } users.State, err = q.latestState(ctx, userTable) return users, err } func (q *Queries) IsUserUnique(ctx context.Context, username, email, resourceOwner string, withOwnerRemoved bool) (isUnique bool, err error) { ctx, span := tracing.NewSpan(ctx) defer func() { span.EndWithError(err) }() query, scan := prepareUserUniqueQuery(ctx, q.client) queries := make([]SearchQuery, 0, 3) if username != "" { usernameQuery, err := NewUserUsernameSearchQuery(username, TextEquals) if err != nil { return false, err } queries = append(queries, usernameQuery) } if email != "" { emailQuery, err := NewUserEmailSearchQuery(email, TextEquals) if err != nil { return false, err } queries = append(queries, emailQuery) } if resourceOwner != "" { resourceOwnerQuery, err := NewUserResourceOwnerSearchQuery(resourceOwner, TextEquals) if err != nil { return false, err } queries = append(queries, resourceOwnerQuery) } for _, q := range queries { query = q.toQuery(query) } eq := sq.Eq{UserInstanceIDCol.identifier(): authz.GetInstance(ctx).InstanceID()} if !withOwnerRemoved { eq[UserOwnerRemovedCol.identifier()] = false } stmt, args, err := query.Where(eq).ToSql() if err != nil { return false, errors.ThrowInternal(err, "QUERY-Dg43g", "Errors.Query.SQLStatment") } err = q.client.QueryRowContext(ctx, func(row *sql.Row) error { isUnique, err = scan(row) return err }, stmt, args...) return isUnique, err } func (q *UserSearchQueries) toQuery(query sq.SelectBuilder) sq.SelectBuilder { query = q.SearchRequest.toQuery(query) for _, q := range q.Queries { query = q.toQuery(query) } return query } func (r *UserSearchQueries) AppendMyResourceOwnerQuery(orgID string) error { query, err := NewUserResourceOwnerSearchQuery(orgID, TextEquals) if err != nil { return err } r.Queries = append(r.Queries, query) return nil } func NewUserInUserIdsSearchQuery(values []string) (SearchQuery, error) { return NewInTextQuery(UserIDCol, values) } func NewUserResourceOwnerSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(UserResourceOwnerCol, value, comparison) } func NewUserUsernameSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(UserUsernameCol, value, comparison) } func NewUserFirstNameSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(HumanFirstNameCol, value, comparison) } func NewUserLastNameSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(HumanLastNameCol, value, comparison) } func NewUserNickNameSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(HumanNickNameCol, value, comparison) } func NewUserDisplayNameSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(HumanDisplayNameCol, value, comparison) } func NewUserEmailSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(HumanEmailCol, value, comparison) } func NewUserPhoneSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(HumanPhoneCol, value, comparison) } func NewUserVerifiedEmailSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(NotifyVerifiedEmailCol, value, comparison) } func NewUserVerifiedPhoneSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(NotifyVerifiedPhoneCol, value, comparison) } func NewUserStateSearchQuery(value int32) (SearchQuery, error) { return NewNumberQuery(UserStateCol, value, NumberEquals) } func NewUserTypeSearchQuery(value int32) (SearchQuery, error) { return NewNumberQuery(UserTypeCol, value, NumberEquals) } func NewUserPreferredLoginNameSearchQuery(value string, comparison TextComparison) (SearchQuery, error) { return NewTextQuery(userPreferredLoginNameCol, value, comparison) } func NewUserLoginNamesSearchQuery(value string) (SearchQuery, error) { return NewTextQuery(userLoginNamesLowerListCol, strings.ToLower(value), TextListContains) } func NewUserLoginNameExistsQuery(value string, comparison TextComparison) (SearchQuery, error) { //linking queries for the subselect instanceQuery, err := NewColumnComparisonQuery(LoginNameInstanceIDCol, UserInstanceIDCol, ColumnEquals) if err != nil { return nil, err } userIDQuery, err := NewColumnComparisonQuery(LoginNameUserIDCol, UserIDCol, ColumnEquals) if err != nil { return nil, err } //text query to select data from the linked sub select loginNameQuery, err := NewTextQuery(LoginNameNameCol, value, comparison) if err != nil { return nil, err } //full definition of the sub select subSelect, err := NewSubSelect(LoginNameUserIDCol, []SearchQuery{instanceQuery, userIDQuery, loginNameQuery}) if err != nil { return nil, err } // "WHERE * IN (*)" query with subquery as list-data provider return NewListQuery( UserIDCol, subSelect, ListIn, ) } func triggerUserProjections(ctx context.Context) { wg := sync.WaitGroup{} wg.Add(2) func() { _, traceSpan := tracing.NewNamedSpan(ctx, "TriggerUserProjection") _, err := projection.UserProjection.Trigger(ctx, handler.WithAwaitRunning()) logging.OnError(err).Debug("trigger failed") traceSpan.EndWithError(err) wg.Done() }() func() { _, traceSpan := tracing.NewNamedSpan(ctx, "TriggerLoginNameProjection") _, err := projection.LoginNameProjection.Trigger(ctx, handler.WithAwaitRunning()) traceSpan.EndWithError(err) logging.OnError(err).Debug("trigger failed") wg.Done() }() wg.Wait() } func prepareLoginNamesQuery() (string, []interface{}, error) { return sq.Select( userLoginNamesUserIDCol.identifier(), "ARRAY_AGG("+userLoginNamesNameCol.identifier()+")::TEXT[] AS "+userLoginNamesListCol.name, "ARRAY_AGG(LOWER("+userLoginNamesNameCol.identifier()+"))::TEXT[] AS "+userLoginNamesLowerListCol.name, userLoginNamesInstanceIDCol.identifier(), userLoginNamesOwnerRemovedUserCol.identifier(), userLoginNamesOwnerRemovedPolicyCol.identifier(), userLoginNamesOwnerRemovedDomainCol.identifier(), ).From(userLoginNamesTable.identifier()). GroupBy( userLoginNamesUserIDCol.identifier(), userLoginNamesInstanceIDCol.identifier(), userLoginNamesOwnerRemovedUserCol.identifier(), userLoginNamesOwnerRemovedPolicyCol.identifier(), userLoginNamesOwnerRemovedDomainCol.identifier(), ).ToSql() } func preparePreferredLoginNamesQuery() (string, []interface{}, error) { return sq.Select( userPreferredLoginNameUserIDCol.identifier(), userPreferredLoginNameCol.identifier(), userPreferredLoginNameInstanceIDCol.identifier(), userPreferredLoginNameOwnerRemovedUserCol.identifier(), userPreferredLoginNameOwnerRemovedPolicyCol.identifier(), userPreferredLoginNameOwnerRemovedDomainCol.identifier(), ).From(userPreferredLoginNameTable.identifier()). Where(sq.Eq{ userPreferredLoginNameIsPrimaryCol.identifier(): true, }, ).ToSql() } func prepareUserQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Row) (*User, error)) { loginNamesQuery, loginNamesArgs, err := prepareLoginNamesQuery() if err != nil { return sq.SelectBuilder{}, nil } preferredLoginNameQuery, preferredLoginNameArgs, err := preparePreferredLoginNamesQuery() if err != nil { return sq.SelectBuilder{}, nil } return sq.Select( UserIDCol.identifier(), UserCreationDateCol.identifier(), UserChangeDateCol.identifier(), UserResourceOwnerCol.identifier(), UserSequenceCol.identifier(), UserStateCol.identifier(), UserTypeCol.identifier(), UserUsernameCol.identifier(), userLoginNamesListCol.identifier(), userPreferredLoginNameCol.identifier(), HumanUserIDCol.identifier(), HumanFirstNameCol.identifier(), HumanLastNameCol.identifier(), HumanNickNameCol.identifier(), HumanDisplayNameCol.identifier(), HumanPreferredLanguageCol.identifier(), HumanGenderCol.identifier(), HumanAvatarURLCol.identifier(), HumanEmailCol.identifier(), HumanIsEmailVerifiedCol.identifier(), HumanPhoneCol.identifier(), HumanIsPhoneVerifiedCol.identifier(), MachineUserIDCol.identifier(), MachineNameCol.identifier(), MachineDescriptionCol.identifier(), MachineHasSecretCol.identifier(), MachineAccessTokenTypeCol.identifier(), countColumn.identifier(), ). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol)). LeftJoin(join(MachineUserIDCol, UserIDCol)). LeftJoin("("+loginNamesQuery+") AS "+userLoginNamesTable.alias+" ON "+ userLoginNamesUserIDCol.identifier()+" = "+UserIDCol.identifier()+" AND "+ userLoginNamesInstanceIDCol.identifier()+" = "+UserInstanceIDCol.identifier(), loginNamesArgs...). LeftJoin("("+preferredLoginNameQuery+") AS "+userPreferredLoginNameTable.alias+" ON "+ userPreferredLoginNameUserIDCol.identifier()+" = "+UserIDCol.identifier()+" AND "+ userPreferredLoginNameInstanceIDCol.identifier()+" = "+UserInstanceIDCol.identifier()+db.Timetravel(call.Took(ctx)), preferredLoginNameArgs...). PlaceholderFormat(sq.Dollar), func(row *sql.Row) (*User, error) { u := new(User) var count int preferredLoginName := sql.NullString{} humanID := sql.NullString{} firstName := sql.NullString{} lastName := sql.NullString{} nickName := sql.NullString{} displayName := sql.NullString{} preferredLanguage := sql.NullString{} gender := sql.NullInt32{} avatarKey := sql.NullString{} email := sql.NullString{} isEmailVerified := sql.NullBool{} phone := sql.NullString{} isPhoneVerified := sql.NullBool{} machineID := sql.NullString{} name := sql.NullString{} description := sql.NullString{} hasSecret := sql.NullBool{} accessTokenType := sql.NullInt32{} err := row.Scan( &u.ID, &u.CreationDate, &u.ChangeDate, &u.ResourceOwner, &u.Sequence, &u.State, &u.Type, &u.Username, &u.LoginNames, &preferredLoginName, &humanID, &firstName, &lastName, &nickName, &displayName, &preferredLanguage, &gender, &avatarKey, &email, &isEmailVerified, &phone, &isPhoneVerified, &machineID, &name, &description, &hasSecret, &accessTokenType, &count, ) if err != nil || count != 1 { if errs.Is(err, sql.ErrNoRows) || count != 1 { return nil, errors.ThrowNotFound(err, "QUERY-Dfbg2", "Errors.User.NotFound") } return nil, errors.ThrowInternal(err, "QUERY-Bgah2", "Errors.Internal") } u.PreferredLoginName = preferredLoginName.String if humanID.Valid { u.Human = &Human{ FirstName: firstName.String, LastName: lastName.String, NickName: nickName.String, DisplayName: displayName.String, AvatarKey: avatarKey.String, PreferredLanguage: language.Make(preferredLanguage.String), Gender: domain.Gender(gender.Int32), Email: domain.EmailAddress(email.String), IsEmailVerified: isEmailVerified.Bool, Phone: domain.PhoneNumber(phone.String), IsPhoneVerified: isPhoneVerified.Bool, } } else if machineID.Valid { u.Machine = &Machine{ Name: name.String, Description: description.String, HasSecret: hasSecret.Bool, AccessTokenType: domain.OIDCTokenType(accessTokenType.Int32), } } return u, nil } } func prepareProfileQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Row) (*Profile, error)) { return sq.Select( UserIDCol.identifier(), UserCreationDateCol.identifier(), UserChangeDateCol.identifier(), UserResourceOwnerCol.identifier(), UserSequenceCol.identifier(), HumanUserIDCol.identifier(), HumanFirstNameCol.identifier(), HumanLastNameCol.identifier(), HumanNickNameCol.identifier(), HumanDisplayNameCol.identifier(), HumanPreferredLanguageCol.identifier(), HumanGenderCol.identifier(), HumanAvatarURLCol.identifier()). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol) + db.Timetravel(call.Took(ctx))). PlaceholderFormat(sq.Dollar), func(row *sql.Row) (*Profile, error) { p := new(Profile) humanID := sql.NullString{} firstName := sql.NullString{} lastName := sql.NullString{} nickName := sql.NullString{} displayName := sql.NullString{} preferredLanguage := sql.NullString{} gender := sql.NullInt32{} avatarKey := sql.NullString{} err := row.Scan( &p.ID, &p.CreationDate, &p.ChangeDate, &p.ResourceOwner, &p.Sequence, &humanID, &firstName, &lastName, &nickName, &displayName, &preferredLanguage, &gender, &avatarKey, ) if err != nil { if errs.Is(err, sql.ErrNoRows) { return nil, errors.ThrowNotFound(err, "QUERY-HNhb3", "Errors.User.NotFound") } return nil, errors.ThrowInternal(err, "QUERY-Rfheq", "Errors.Internal") } if !humanID.Valid { return nil, errors.ThrowPreconditionFailed(nil, "QUERY-WLTce", "Errors.User.NotHuman") } p.FirstName = firstName.String p.LastName = lastName.String p.NickName = nickName.String p.DisplayName = displayName.String p.AvatarKey = avatarKey.String p.PreferredLanguage = language.Make(preferredLanguage.String) p.Gender = domain.Gender(gender.Int32) return p, nil } } func prepareEmailQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Row) (*Email, error)) { return sq.Select( UserIDCol.identifier(), UserCreationDateCol.identifier(), UserChangeDateCol.identifier(), UserResourceOwnerCol.identifier(), UserSequenceCol.identifier(), HumanUserIDCol.identifier(), HumanEmailCol.identifier(), HumanIsEmailVerifiedCol.identifier()). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol) + db.Timetravel(call.Took(ctx))). PlaceholderFormat(sq.Dollar), func(row *sql.Row) (*Email, error) { e := new(Email) humanID := sql.NullString{} email := sql.NullString{} isEmailVerified := sql.NullBool{} err := row.Scan( &e.ID, &e.CreationDate, &e.ChangeDate, &e.ResourceOwner, &e.Sequence, &humanID, &email, &isEmailVerified, ) if err != nil { if errs.Is(err, sql.ErrNoRows) { return nil, errors.ThrowNotFound(err, "QUERY-Hms2s", "Errors.User.NotFound") } return nil, errors.ThrowInternal(err, "QUERY-Nu42d", "Errors.Internal") } if !humanID.Valid { return nil, errors.ThrowPreconditionFailed(nil, "QUERY-pt7HY", "Errors.User.NotHuman") } e.Email = domain.EmailAddress(email.String) e.IsVerified = isEmailVerified.Bool return e, nil } } func preparePhoneQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Row) (*Phone, error)) { return sq.Select( UserIDCol.identifier(), UserCreationDateCol.identifier(), UserChangeDateCol.identifier(), UserResourceOwnerCol.identifier(), UserSequenceCol.identifier(), HumanUserIDCol.identifier(), HumanPhoneCol.identifier(), HumanIsPhoneVerifiedCol.identifier()). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol) + db.Timetravel(call.Took(ctx))). PlaceholderFormat(sq.Dollar), func(row *sql.Row) (*Phone, error) { e := new(Phone) humanID := sql.NullString{} phone := sql.NullString{} isPhoneVerified := sql.NullBool{} err := row.Scan( &e.ID, &e.CreationDate, &e.ChangeDate, &e.ResourceOwner, &e.Sequence, &humanID, &phone, &isPhoneVerified, ) if err != nil { if errs.Is(err, sql.ErrNoRows) { return nil, errors.ThrowNotFound(err, "QUERY-DAvb3", "Errors.User.NotFound") } return nil, errors.ThrowInternal(err, "QUERY-Bmf2h", "Errors.Internal") } if !humanID.Valid { return nil, errors.ThrowPreconditionFailed(nil, "QUERY-hliQl", "Errors.User.NotHuman") } e.Phone = phone.String e.IsVerified = isPhoneVerified.Bool return e, nil } } func prepareNotifyUserQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Row) (*NotifyUser, error)) { loginNamesQuery, loginNamesArgs, err := prepareLoginNamesQuery() if err != nil { return sq.SelectBuilder{}, nil } preferredLoginNameQuery, preferredLoginNameArgs, err := preparePreferredLoginNamesQuery() if err != nil { return sq.SelectBuilder{}, nil } return sq.Select( UserIDCol.identifier(), UserCreationDateCol.identifier(), UserChangeDateCol.identifier(), UserResourceOwnerCol.identifier(), UserSequenceCol.identifier(), UserStateCol.identifier(), UserTypeCol.identifier(), UserUsernameCol.identifier(), userLoginNamesListCol.identifier(), userPreferredLoginNameCol.identifier(), HumanUserIDCol.identifier(), HumanFirstNameCol.identifier(), HumanLastNameCol.identifier(), HumanNickNameCol.identifier(), HumanDisplayNameCol.identifier(), HumanPreferredLanguageCol.identifier(), HumanGenderCol.identifier(), HumanAvatarURLCol.identifier(), NotifyUserIDCol.identifier(), NotifyEmailCol.identifier(), NotifyVerifiedEmailCol.identifier(), NotifyPhoneCol.identifier(), NotifyVerifiedPhoneCol.identifier(), NotifyPasswordSetCol.identifier(), countColumn.identifier(), ). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol)). LeftJoin(join(NotifyUserIDCol, UserIDCol)). LeftJoin("("+loginNamesQuery+") AS "+userLoginNamesTable.alias+" ON "+ userLoginNamesUserIDCol.identifier()+" = "+UserIDCol.identifier()+" AND "+ userLoginNamesInstanceIDCol.identifier()+" = "+UserInstanceIDCol.identifier(), loginNamesArgs...). LeftJoin("("+preferredLoginNameQuery+") AS "+userPreferredLoginNameTable.alias+" ON "+ userPreferredLoginNameUserIDCol.identifier()+" = "+UserIDCol.identifier()+" AND "+ userPreferredLoginNameInstanceIDCol.identifier()+" = "+UserInstanceIDCol.identifier()+db.Timetravel(call.Took(ctx)), preferredLoginNameArgs...). PlaceholderFormat(sq.Dollar), func(row *sql.Row) (*NotifyUser, error) { u := new(NotifyUser) var count int loginNames := database.TextArray[string]{} preferredLoginName := sql.NullString{} humanID := sql.NullString{} firstName := sql.NullString{} lastName := sql.NullString{} nickName := sql.NullString{} displayName := sql.NullString{} preferredLanguage := sql.NullString{} gender := sql.NullInt32{} avatarKey := sql.NullString{} notifyUserID := sql.NullString{} notifyEmail := sql.NullString{} notifyVerifiedEmail := sql.NullString{} notifyPhone := sql.NullString{} notifyVerifiedPhone := sql.NullString{} notifyPasswordSet := sql.NullBool{} err := row.Scan( &u.ID, &u.CreationDate, &u.ChangeDate, &u.ResourceOwner, &u.Sequence, &u.State, &u.Type, &u.Username, &loginNames, &preferredLoginName, &humanID, &firstName, &lastName, &nickName, &displayName, &preferredLanguage, &gender, &avatarKey, ¬ifyUserID, ¬ifyEmail, ¬ifyVerifiedEmail, ¬ifyPhone, ¬ifyVerifiedPhone, ¬ifyPasswordSet, &count, ) if err != nil || count != 1 { if errs.Is(err, sql.ErrNoRows) || count != 1 { return nil, errors.ThrowNotFound(err, "QUERY-Dgqd2", "Errors.User.NotFound") } return nil, errors.ThrowInternal(err, "QUERY-Dbwsg", "Errors.Internal") } if !notifyUserID.Valid { return nil, errors.ThrowPreconditionFailed(nil, "QUERY-Sfw3f", "Errors.User.NotFound") } u.LoginNames = loginNames if preferredLoginName.Valid { u.PreferredLoginName = preferredLoginName.String } if humanID.Valid { u.FirstName = firstName.String u.LastName = lastName.String u.NickName = nickName.String u.DisplayName = displayName.String u.AvatarKey = avatarKey.String u.PreferredLanguage = language.Make(preferredLanguage.String) u.Gender = domain.Gender(gender.Int32) } u.LastEmail = notifyEmail.String u.VerifiedEmail = notifyVerifiedEmail.String u.LastPhone = notifyPhone.String u.VerifiedPhone = notifyVerifiedPhone.String u.PasswordSet = notifyPasswordSet.Bool return u, nil } } func prepareUserUniqueQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Row) (bool, error)) { return sq.Select( UserIDCol.identifier(), UserStateCol.identifier(), UserUsernameCol.identifier(), HumanUserIDCol.identifier(), HumanEmailCol.identifier(), HumanIsEmailVerifiedCol.identifier()). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol) + db.Timetravel(call.Took(ctx))). PlaceholderFormat(sq.Dollar), func(row *sql.Row) (bool, error) { userID := sql.NullString{} state := sql.NullInt32{} username := sql.NullString{} humanID := sql.NullString{} email := sql.NullString{} isEmailVerified := sql.NullBool{} err := row.Scan( &userID, &state, &username, &humanID, &email, &isEmailVerified, ) if err != nil { if errs.Is(err, sql.ErrNoRows) { return true, nil } return false, errors.ThrowInternal(err, "QUERY-Cxces", "Errors.Internal") } return !userID.Valid, nil } } func prepareUsersQuery(ctx context.Context, db prepareDatabase) (sq.SelectBuilder, func(*sql.Rows) (*Users, error)) { loginNamesQuery, loginNamesArgs, err := prepareLoginNamesQuery() if err != nil { return sq.SelectBuilder{}, nil } preferredLoginNameQuery, preferredLoginNameArgs, err := preparePreferredLoginNamesQuery() if err != nil { return sq.SelectBuilder{}, nil } return sq.Select( UserIDCol.identifier(), UserCreationDateCol.identifier(), UserChangeDateCol.identifier(), UserResourceOwnerCol.identifier(), UserSequenceCol.identifier(), UserStateCol.identifier(), UserTypeCol.identifier(), UserUsernameCol.identifier(), userLoginNamesListCol.identifier(), userPreferredLoginNameCol.identifier(), HumanUserIDCol.identifier(), HumanFirstNameCol.identifier(), HumanLastNameCol.identifier(), HumanNickNameCol.identifier(), HumanDisplayNameCol.identifier(), HumanPreferredLanguageCol.identifier(), HumanGenderCol.identifier(), HumanAvatarURLCol.identifier(), HumanEmailCol.identifier(), HumanIsEmailVerifiedCol.identifier(), HumanPhoneCol.identifier(), HumanIsPhoneVerifiedCol.identifier(), MachineUserIDCol.identifier(), MachineNameCol.identifier(), MachineDescriptionCol.identifier(), MachineHasSecretCol.identifier(), MachineAccessTokenTypeCol.identifier(), countColumn.identifier()). From(userTable.identifier()). LeftJoin(join(HumanUserIDCol, UserIDCol)). LeftJoin(join(MachineUserIDCol, UserIDCol)). LeftJoin("("+loginNamesQuery+") AS "+userLoginNamesTable.alias+" ON "+ userLoginNamesUserIDCol.identifier()+" = "+UserIDCol.identifier()+" AND "+ userLoginNamesInstanceIDCol.identifier()+" = "+UserInstanceIDCol.identifier(), loginNamesArgs...). LeftJoin("("+preferredLoginNameQuery+") AS "+userPreferredLoginNameTable.alias+" ON "+ userPreferredLoginNameUserIDCol.identifier()+" = "+UserIDCol.identifier()+" AND "+ userPreferredLoginNameInstanceIDCol.identifier()+" = "+UserInstanceIDCol.identifier()+db.Timetravel(call.Took(ctx)), preferredLoginNameArgs...). PlaceholderFormat(sq.Dollar), func(rows *sql.Rows) (*Users, error) { users := make([]*User, 0) var count uint64 for rows.Next() { u := new(User) loginNames := database.TextArray[string]{} preferredLoginName := sql.NullString{} humanID := sql.NullString{} firstName := sql.NullString{} lastName := sql.NullString{} nickName := sql.NullString{} displayName := sql.NullString{} preferredLanguage := sql.NullString{} gender := sql.NullInt32{} avatarKey := sql.NullString{} email := sql.NullString{} isEmailVerified := sql.NullBool{} phone := sql.NullString{} isPhoneVerified := sql.NullBool{} machineID := sql.NullString{} name := sql.NullString{} description := sql.NullString{} hasSecret := sql.NullBool{} accessTokenType := sql.NullInt32{} err := rows.Scan( &u.ID, &u.CreationDate, &u.ChangeDate, &u.ResourceOwner, &u.Sequence, &u.State, &u.Type, &u.Username, &loginNames, &preferredLoginName, &humanID, &firstName, &lastName, &nickName, &displayName, &preferredLanguage, &gender, &avatarKey, &email, &isEmailVerified, &phone, &isPhoneVerified, &machineID, &name, &description, &hasSecret, &accessTokenType, &count, ) if err != nil { return nil, err } u.LoginNames = loginNames if preferredLoginName.Valid { u.PreferredLoginName = preferredLoginName.String } if humanID.Valid { u.Human = &Human{ FirstName: firstName.String, LastName: lastName.String, NickName: nickName.String, DisplayName: displayName.String, AvatarKey: avatarKey.String, PreferredLanguage: language.Make(preferredLanguage.String), Gender: domain.Gender(gender.Int32), Email: domain.EmailAddress(email.String), IsEmailVerified: isEmailVerified.Bool, Phone: domain.PhoneNumber(phone.String), IsPhoneVerified: isPhoneVerified.Bool, } } else if machineID.Valid { u.Machine = &Machine{ Name: name.String, Description: description.String, HasSecret: hasSecret.Bool, AccessTokenType: domain.OIDCTokenType(accessTokenType.Int32), } } users = append(users, u) } if err := rows.Close(); err != nil { return nil, errors.ThrowInternal(err, "QUERY-frhbd", "Errors.Query.CloseRows") } return &Users{ Users: users, SearchResponse: SearchResponse{ Count: count, }, }, nil } }