photoprism/internal/entity/auth_user_add.go
Michael Mayer d50da1e007 Auth: Only allow setting a password hash for the initial account #1987
Signed-off-by: Michael Mayer <michael@photoprism.app>
2023-04-13 19:46:00 +02:00

40 lines
837 B
Go

package entity
import (
"fmt"
"github.com/jinzhu/gorm"
"github.com/photoprism/photoprism/internal/form"
"github.com/photoprism/photoprism/pkg/clean"
)
// AddUser creates a new user record and sets the password in a single transaction.
func AddUser(frm form.User) error {
user := NewUser().SetFormValues(frm)
if len(frm.Password) < PasswordLength {
return fmt.Errorf("password must have at least %d characters", PasswordLength)
}
if err := user.Validate(); err != nil {
return err
}
return Db().Transaction(func(tx *gorm.DB) error {
if err := tx.Create(user).Error; err != nil {
return err
}
pw := NewPassword(user.UserUID, frm.Password, false)
if err := tx.Create(&pw).Error; err != nil {
return err
}
log.Infof("successfully added user %s", clean.LogQuote(user.Username()))
return nil
})
}