feat: provide option to create admin at the time of setup (#419)

Author: tanmoysrt

swiftwave_service/config/system_config/bootstrap/setup.go

@@ -3,6 +3,7 @@ package bootstrap
 import (
 	"errors"
 	"fmt"
+	"github.com/swiftwave-org/swiftwave/swiftwave_service/core"
 	"net/http"
 	"os"
 	"os/exec"
@@ -70,33 +71,65 @@ func SystemSetupHandler(c echo.Context) error {
 			"message": "System setup already completed",
 		})
 	}
-	// Create DB client
-	dbClient, err := db.GetClient(localConfig, 1)
-	if err != nil {
-		return c.JSON(http.StatusInternalServerError, map[string]interface{}{
-			"message": "Failed to connect to database",
-		})
-	}
 	// Create system configuration
 	systemConfigReq := new(SystemConfigurationPayload)
 	if err := c.Bind(systemConfigReq); err != nil {
 		return c.JSON(http.StatusBadRequest, map[string]interface{}{
 			"message": err.Error(),
 		})
 	}
-	// Convert to DB record
+	// If provided admin username and password are empty, return an error
+	if systemConfigReq.NewAdminCredential.Username == "" || systemConfigReq.NewAdminCredential.Password == "" {
+		return c.JSON(http.StatusBadRequest, map[string]interface{}{
+			"message": "Admin username and password are required",
+		})
+	}
+
+	// Create DB client
+	dbClient, err := db.GetClient(localConfig, 2)
+	if err != nil {
+		return c.JSON(http.StatusInternalServerError, map[string]interface{}{
+			"message": "Failed to connect to database",
+		})
+	}
+	// Create transaction
+	tx := dbClient.Begin()
+	defer tx.Rollback()
+	// Convert system config to DB record
 	systemConfig, err := payloadToDBRecord(*systemConfigReq)
 	if err != nil {
 		return c.JSON(http.StatusBadRequest, map[string]interface{}{
 			"message": err.Error(),
 		})
 	}
-	// Save to DB
-	if err := dbClient.Create(&systemConfig).Error; err != nil {
+	// Save system config to DB
+	if err := tx.Create(&systemConfig).Error; err != nil {
 		return c.JSON(http.StatusInternalServerError, map[string]interface{}{
 			"message": "Failed to save system configuration",
 		})
 	}
+	// Create the initial user
+	user := core.User{
+		Username: systemConfigReq.NewAdminCredential.Username,
+	}
+	err = user.SetPassword(systemConfigReq.NewAdminCredential.Password)
+	if err != nil {
+		return c.JSON(http.StatusInternalServerError, map[string]interface{}{
+			"message": "Failed to set password",
+		})
+	}
+	if _, err := core.CreateUser(c.Request().Context(), *tx, user); err != nil {
+		return c.JSON(http.StatusInternalServerError, map[string]interface{}{
+			"message": "Failed to create user",
+		})
+	}
+	// Commit transaction
+	res := tx.Commit()
+	if res.Error != nil {
+		return c.JSON(http.StatusInternalServerError, map[string]interface{}{
+			"message": "Failed to commit transaction",
+		})
+	}
 	// Restart swiftwave service
 	go func() {
 		// wait for 2 seconds
@@ -161,6 +194,9 @@ func UpdateSystemConfigHandler(c echo.Context) error {
 			"message": "Invalid request payload",
 		})
 	}
+	// Remove some fields for safety
+	systemConfigReq.NewAdminCredential.Username = ""
+	systemConfigReq.NewAdminCredential.Password = ""
 	// Inject some fields
 	systemConfigReq.JWTSecretKey = sysConfig.JWTSecretKey
 	systemConfigReq.HAProxyConfig.Username = sysConfig.HAProxyConfig.Username

swiftwave_service/config/system_config/bootstrap/types.go

@@ -28,6 +28,7 @@ type SystemConfigurationPayload struct {
 	PvBackupConfig       PvBackupConfig      `json:"pv_backup_config"`
 	PubsubConfig         PubsubConfig        `json:"pubsub_config"`
 	TaskQueueConfig      TaskQueueConfig     `json:"task_queue_config"`
+	NewAdminCredential   NewAdminCredential  `json:"new_admin_credential"`
 }
 
 type LetsEncryptConfig struct {
@@ -96,3 +97,8 @@ type AmqpConfig struct {
 	Password string                 `json:"password"`
 	Vhost    string                 `json:"vhost"`
 }
+
+type NewAdminCredential struct {
+	Username string `json:"username"`
+	Password string `json:"password"`
+}

swiftwave_service/config/system_config/bootstrap/utils.go

@@ -285,6 +285,10 @@ func dbRecordToPayload(record *system_config.SystemConfig) SystemConfigurationPa
 		},
 		PubsubConfig:    pubsubConfig,
 		TaskQueueConfig: taskQueueConfig,
+		NewAdminCredential: NewAdminCredential{
+			Username: "hidden",
+			Password: "hidden",
+		},
 	}
 }