slave 0.2.0

Laravel-inspired CLI for Rust web apps: scaffold Axum projects with built-in auth, users, roles and Turso migrations
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

//! HTTP handlers for users. Business rules live in `UserService`.

use axum::Json;
use axum::extract::{Path, State};
use axum::http::StatusCode;

use crate::base::auth::{AdminUser, AuthUser};
use crate::base::error::{AppError, AppResult};
use crate::modules::user::dto::user::UserResponse;
use crate::modules::user::services::user_service::UserService;

/// `GET /users` (admin only).
pub async fn index(
    _admin: AdminUser,
    State(service): State<UserService>,
) -> AppResult<Json<Vec<UserResponse>>> {
    let users = service.list().await?;
    Ok(Json(users.into_iter().map(UserResponse::from).collect()))
}

/// `GET /users/{id}`: admins can view anyone, other users only themselves.
pub async fn show(
    user: AuthUser,
    State(service): State<UserService>,
    Path(id): Path<i64>,
) -> AppResult<Json<UserResponse>> {
    if user.id != id && !user.is_admin() {
        return Err(AppError::Forbidden);
    }
    Ok(Json(service.find(id).await?.into()))
}

/// `DELETE /users/{id}` (admin only).
pub async fn destroy(
    AdminUser(admin): AdminUser,
    State(service): State<UserService>,
    Path(id): Path<i64>,
) -> AppResult<StatusCode> {
    service.delete(id, admin.id).await?;
    Ok(StatusCode::NO_CONTENT)
}