Codevault initial commit

cmd/add_user.go

@@ -0,0 +1,83 @@
+package cmd
+
+import (
+	"fmt"
+	"os"
+
+	"github.com/spf13/cobra"
+	"golang.org/x/term"
+
+	"github.com/kanootoko/codevault/internal/runcmd"
+)
+
+var addUserCmd = &cobra.Command{
+	Use:   "add-user",
+	Short: "Add or update a user in the database",
+	Long: `Add or update a user in the database. Does not read the application config -
+only a database path is needed; if the database file does not exist it is
+created together with its schema.`,
+	RunE: runAddUser,
+}
+
+func init() {
+	addUserCmd.Flags().String("db-path", "./codevault.db", "Path to the SQLite database file")
+	addUserCmd.Flags().String("login", "", "Login of the user to add or update")
+	addUserCmd.Flags().String("password", "", "Password for the user (if omitted, prompted interactively; "+
+		"passing it as a flag can leak the password via shell history)")
+	_ = addUserCmd.MarkFlagRequired("login")
+
+	rootCmd.AddCommand(addUserCmd)
+}
+
+func runAddUser(cmd *cobra.Command, args []string) error {
+	dbPath, err := cmd.Flags().GetString("db-path")
+	if err != nil {
+		return fmt.Errorf("error on getting db-path option: %w", err)
+	}
+	login, err := cmd.Flags().GetString("login")
+	if err != nil {
+		return fmt.Errorf("error on getting login option: %w", err)
+	}
+	password, err := cmd.Flags().GetString("password")
+	if err != nil {
+		return fmt.Errorf("error on getting password option: %w", err)
+	}
+
+	if password == "" {
+		password, err = readPasswordWithConfirmation(cmd)
+		if err != nil {
+			return fmt.Errorf("error on reading password: %w", err)
+		}
+	}
+
+	if err := runcmd.AddUser(dbPath, login, password); err != nil {
+		return fmt.Errorf("error on adding user: %w", err)
+	}
+
+	cmd.Println("user saved successfully")
+	return nil
+}
+
+func readPasswordWithConfirmation(cmd *cobra.Command) (string, error) {
+	fd := int(os.Stdin.Fd())
+
+	cmd.Print("Password: ")
+	password, err := term.ReadPassword(fd)
+	cmd.Println()
+	if err != nil {
+		return "", fmt.Errorf("error on reading password: %w", err)
+	}
+
+	cmd.Print("Confirm password: ")
+	confirmation, err := term.ReadPassword(fd)
+	cmd.Println()
+	if err != nil {
+		return "", fmt.Errorf("error on reading password confirmation: %w", err)
+	}
+
+	if string(password) != string(confirmation) {
+		return "", fmt.Errorf("passwords do not match")
+	}
+
+	return string(password), nil
+}