gerrit-server/src/main/java/com/google/gerrit/server/account/DeleteExternalIds.java

// Copyright (C) 2017 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.gerrit.server.account;

import static com.google.gerrit.reviewdb.client.AccountExternalId.SCHEME_USERNAME;

import com.google.gerrit.extensions.restapi.AuthException;
import com.google.gerrit.extensions.restapi.BadRequestException;
import com.google.gerrit.extensions.restapi.ResourceConflictException;
import com.google.gerrit.extensions.restapi.Response;
import com.google.gerrit.extensions.restapi.RestApiException;
import com.google.gerrit.extensions.restapi.RestModifyView;
import com.google.gerrit.extensions.restapi.UnprocessableEntityException;
import com.google.gerrit.reviewdb.client.Account;
import com.google.gerrit.reviewdb.client.AccountExternalId;
import com.google.gerrit.reviewdb.server.ReviewDb;
import com.google.gerrit.server.CurrentUser;
import com.google.gwtorm.server.OrmException;
import com.google.inject.Inject;
import com.google.inject.Provider;
import com.google.inject.Singleton;
import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.stream.Collectors;

@Singleton
public class DeleteExternalIds implements RestModifyView<AccountResource, List<String>> {
  private final Provider<ReviewDb> db;
  private final AccountByEmailCache accountByEmailCache;
  private final AccountCache accountCache;
  private final Provider<CurrentUser> self;
  private final Provider<ReviewDb> dbProvider;

  @Inject
  DeleteExternalIds(
      Provider<ReviewDb> db,
      AccountByEmailCache accountByEmailCache,
      AccountCache accountCache,
      Provider<CurrentUser> self,
      Provider<ReviewDb> dbProvider) {
    this.db = db;
    this.accountByEmailCache = accountByEmailCache;
    this.accountCache = accountCache;
    this.self = self;
    this.dbProvider = dbProvider;
  }

  @Override
  public Response<?> apply(AccountResource resource, List<String> externalIds)
      throws RestApiException, IOException, OrmException {
    if (self.get() != resource.getUser()) {
      throw new AuthException("not allowed to delete external IDs");
    }

    if (externalIds == null || externalIds.size() == 0) {
      throw new BadRequestException("external IDs are required");
    }

    Account.Id accountId = resource.getUser().getAccountId();
    Map<AccountExternalId.Key, AccountExternalId> externalIdMap =
        db.get()
            .accountExternalIds()
            .byAccount(resource.getUser().getAccountId())
            .toList()
            .stream()
            .collect(Collectors.toMap(i -> i.getKey(), i -> i));

    List<AccountExternalId> toDelete = new ArrayList<>();
    AccountExternalId.Key last = resource.getUser().getLastLoginExternalIdKey();
    for (String externalIdStr : externalIds) {
      AccountExternalId id = externalIdMap.get(new AccountExternalId.Key(externalIdStr));

      if (id == null) {
        throw new UnprocessableEntityException(
            String.format("External id %s does not exist", externalIdStr));
      }

      if ((!id.isScheme(SCHEME_USERNAME))
          && ((last == null) || (!last.get().equals(id.getExternalId())))) {
        toDelete.add(id);
      } else {
        throw new ResourceConflictException(
            String.format("External id %s cannot be deleted", externalIdStr));
      }
    }

    if (!toDelete.isEmpty()) {
      dbProvider.get().accountExternalIds().delete(toDelete);
      accountCache.evict(accountId);
      for (AccountExternalId e : toDelete) {
        accountByEmailCache.evict(e.getEmailAddress());
      }
    }

    return Response.none();
  }
}