defmodule Core.Accounts do @moduledoc """ The Accounts context. """ alias Core.Accounts.User alias Core.Accounts.UserToken alias Core.Repo ## Database getters @doc """ Gets a user by username and password. ## Examples iex> get_user_by_username_and_password("foo@example.com", "correct_password") %Schema.User{} iex> get_user_by_username_and_password("foo@example.com", "invalid_password") nil """ def get_user_by_username_and_password(username, password) when is_binary(username) and is_binary(password) do user = Repo.get_by(Schema.User, username: username) if User.valid_password?(user, password), do: user end @doc """ Gets a single user. Raises `Ecto.NoResultsError` if the User does not exist. ## Examples iex> get_user!(123) %Schema.User{} iex> get_user!(456) ** (Ecto.NoResultsError) """ def get_user!(id), do: Repo.get!(Schema.User, id) ## User registration @doc """ Registers a user. ## Examples iex> register_user(%{field: value}) {:ok, %Schema.User{}} iex> register_user(%{field: bad_value}) {:error, %Ecto.Changeset{}} """ def register_user(attrs) do %Schema.User{} |> User.registration_changeset(attrs) |> Repo.insert() end @doc """ Returns an `%Ecto.Changeset{}` for tracking user changes. ## Examples iex> change_user_registration(user) %Ecto.Changeset{data: %Schema.User{}} """ def change_user_registration(%Schema.User{} = user, attrs \\ %{}) do User.registration_changeset(user, attrs, hash_password: false, validate_username: false) end ## Settings @doc """ Returns an `%Ecto.Changeset{}` for changing the user username. ## Examples iex> change_user_username(user) %Ecto.Changeset{data: %Schema.User{}} """ def change_user_username(user, attrs \\ %{}) do User.username_changeset(user, attrs, validate_username: false) end @doc """ Updates the user username. If the token matches, the user username is updated and the token is deleted. The confirmed_at date is also updated to the current time. """ def update_user_username(user, password, attrs) do user |> User.username_changeset(attrs) |> User.validate_current_password(password) |> Repo.update() end @doc """ Returns an `%Ecto.Changeset{}` for changing the user password. ## Examples iex> change_user_password(user) %Ecto.Changeset{data: %Schema.User{}} """ def change_user_password(user, attrs \\ %{}) do User.password_changeset(user, attrs, hash_password: false) end @doc """ Updates the user password. ## Examples iex> update_user_password(user, "valid password", %{password: ...}) {:ok, %Schema.User{}} iex> update_user_password(user, "invalid password", %{password: ...}) {:error, %Ecto.Changeset{}} """ def update_user_password(user, password, attrs) do changeset = user |> User.password_changeset(attrs) |> User.validate_current_password(password) Ecto.Multi.new() |> Ecto.Multi.update(:user, changeset) |> Ecto.Multi.delete_all(:tokens, UserToken.Query.for_user(user)) |> Repo.transaction() |> case do {:ok, %{user: user}} -> {:ok, user} {:error, :user, changeset, _} -> {:error, changeset} end end ## Session @doc """ Generates a session token. """ def generate_user_session_token(user) do {token, user_token} = UserToken.build_session_token(user) Repo.insert!(user_token) token end @doc """ Gets the user with the given signed token. """ def get_user_by_session_token(token) do token |> UserToken.Query.valid_session_token() |> Repo.one() end @doc """ Deletes the signed token with the given context. """ def delete_user_session_token(token) do Repo.delete_all(UserToken.Query.where_token_and_context(token, "session")) :ok end ## Reset password @doc """ Resets the user password. ## Examples iex> reset_user_password(user, %{password: "new long password", password_confirmation: "new long password"}) {:ok, %Schema.User{}} iex> reset_user_password(user, %{password: "valid", password_confirmation: "not the same"}) {:error, %Ecto.Changeset{}} """ def reset_user_password(user, attrs) do Ecto.Multi.new() |> Ecto.Multi.update(:user, User.password_changeset(user, attrs)) |> Ecto.Multi.delete_all(:tokens, UserToken.Query.for_user(user)) |> Repo.transaction() |> case do {:ok, %{user: user}} -> {:ok, user} {:error, :user, changeset, _} -> {:error, changeset} end end @doc """ Returns `true` if any users exist. """ def has_registered_user? do Repo.exists?(User.Query.has_users_query()) end end