Inicial

backend/internal/settings/handler.go

@@ -0,0 +1,57 @@
+package settings
+
+import (
+	"github.com/gofiber/fiber/v2"
+	"github.com/techxcar/backend/internal/auth"
+	"github.com/techxcar/backend/pkg/database"
+)
+
+func RegisterRoutes(app *fiber.App, db *database.DB, secret string) {
+	read := []fiber.Handler{
+		auth.RequireAuth(secret),
+		auth.RequireRole("tenant_admin", "manager"),
+		auth.TenantMiddleware(db),
+	}
+	admin := []fiber.Handler{
+		auth.RequireAuth(secret),
+		auth.RequireRole("tenant_admin"),
+		auth.TenantMiddleware(db),
+	}
+
+	app.Get("/api/v1/settings", append(read, getSettingsH())...)
+	app.Put("/api/v1/settings", append(admin, updateSettingsH())...)
+}
+
+func getSettingsH() fiber.Handler {
+	return func(c *fiber.Ctx) error {
+		conn := auth.GetConn(c)
+		s, err := GetSettings(c.Context(), conn)
+		if err != nil {
+			return fiber.NewError(500, "erro ao obter definições")
+		}
+		return c.JSON(fiber.Map{"data": s, "error": nil})
+	}
+}
+
+func updateSettingsH() fiber.Handler {
+	return func(c *fiber.Ctx) error {
+		var body map[string]string
+		if err := c.BodyParser(&body); err != nil {
+			return fiber.NewError(400, "corpo do pedido inválido")
+		}
+		conn := auth.GetConn(c)
+		for k, v := range body {
+			if !AllowedKeys[k] {
+				return fiber.NewError(400, "chave inválida: "+k)
+			}
+			if err := SetSetting(c.Context(), conn, k, v); err != nil {
+				return fiber.NewError(500, "erro ao guardar definição: "+k)
+			}
+		}
+		s, err := GetSettings(c.Context(), conn)
+		if err != nil {
+			return fiber.NewError(500, "erro ao obter definições")
+		}
+		return c.JSON(fiber.Map{"data": s, "error": nil})
+	}
+}

backend/internal/settings/repository.go

@@ -0,0 +1,45 @@
+package settings
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/jackc/pgx/v5/pgxpool"
+)
+
+var AllowedKeys = map[string]bool{
+	"company_name":    true,
+	"company_nif":     true,
+	"company_address": true,
+	"company_iban":    true,
+	"company_phone":   true,
+	"company_email":   true,
+}
+
+func GetSettings(ctx context.Context, conn *pgxpool.Conn) (map[string]string, error) {
+	rows, err := conn.Query(ctx, `SELECT key, value FROM tenant_settings`)
+	if err != nil {
+		return nil, fmt.Errorf("settings: get: %w", err)
+	}
+	defer rows.Close()
+	result := map[string]string{}
+	for rows.Next() {
+		var k, v string
+		if err := rows.Scan(&k, &v); err != nil {
+			return nil, fmt.Errorf("settings: scan: %w", err)
+		}
+		result[k] = v
+	}
+	return result, rows.Err()
+}
+
+func SetSetting(ctx context.Context, conn *pgxpool.Conn, key, value string) error {
+	_, err := conn.Exec(ctx,
+		`INSERT INTO tenant_settings (key, value) VALUES ($1, $2)
+		 ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value, updated_at = NOW()`,
+		key, value)
+	if err != nil {
+		return fmt.Errorf("settings: set %s: %w", key, err)
+	}
+	return nil
+}