Serveur Rust : comptes, clés d'API, Paramètres, réglages de synchro, journaux

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LG2LLJuswrrTTPKJmunEVf

server/src/admin/users.rs

@@ -0,0 +1,91 @@
+//! Gestion des comptes (administrateurs) — port de `user-actions.ts`.
+
+use crate::auth::password::hash_password;
+use crate::error::AppResult;
+use crate::rpc::{json, Ctx};
+use serde::Serialize;
+use serde_json::{json as j, Value};
+use sqlx::Row;
+
+#[derive(Serialize)]
+#[serde(rename_all = "camelCase")]
+struct UserRow {
+    id: i32,
+    username: String,
+    role: String,
+    created_at: Option<String>,
+}
+
+/// Tous les utilisateurs.
+pub async fn get_users(ctx: Ctx) -> AppResult<Value> {
+    ctx.admin().await?;
+    let pool = crate::db::pool()?;
+    let rows = sqlx::query("SELECT id, username, role, created_at FROM users").fetch_all(&pool).await?;
+    let users: Vec<UserRow> = rows
+        .iter()
+        .map(|r| UserRow {
+            id: r.try_get("id").unwrap_or_default(),
+            username: r.try_get("username").unwrap_or_default(),
+            role: r.try_get("role").unwrap_or_default(),
+            created_at: r.try_get::<Option<chrono::NaiveDateTime>, _>("created_at").ok().flatten().map(crate::db::iso),
+        })
+        .collect();
+    json(users)
+}
+
+/// Crée un utilisateur.
+pub async fn create_user(ctx: Ctx) -> AppResult<Value> {
+    ctx.admin().await?;
+    let username: String = ctx.arg(0)?;
+    let password: String = ctx.arg(1)?;
+    let role: Option<String> = ctx.arg(2)?;
+    let role = role.unwrap_or_else(|| "user".into());
+    let pool = crate::db::pool()?;
+    match sqlx::query("INSERT INTO users (username, password_hash, role) VALUES ($1, $2, $3)")
+        .bind(&username)
+        .bind(hash_password(&password))
+        .bind(&role)
+        .execute(&pool)
+        .await
+    {
+        Ok(_) => Ok(j!({ "success": true })),
+        Err(e) => {
+            tracing::error!("CreateUser Error: {e}");
+            Ok(j!({ "success": false, "error": "L'utilisateur existe déjà ou une erreur technique est survenue." }))
+        }
+    }
+}
+
+/// Supprime un utilisateur (jamais son propre compte).
+pub async fn delete_user(ctx: Ctx) -> AppResult<Value> {
+    let moi = ctx.admin().await?;
+    let id: i64 = ctx.arg(0)?;
+    if moi.id.parse::<i64>().ok() == Some(id) {
+        return Ok(j!({ "success": false, "error": "Vous ne pouvez pas supprimer votre propre compte." }));
+    }
+    let pool = crate::db::pool()?;
+    match sqlx::query("DELETE FROM users WHERE id = $1").bind(id as i32).execute(&pool).await {
+        Ok(_) => {
+            crate::auth::authz::invalider(&id.to_string());
+            Ok(j!({ "success": true }))
+        }
+        Err(_) => Ok(j!({ "success": false, "error": "Erreur lors de la suppression." })),
+    }
+}
+
+/// Change le mot de passe d'un utilisateur.
+pub async fn update_password(ctx: Ctx) -> AppResult<Value> {
+    ctx.admin().await?;
+    let id: i64 = ctx.arg(0)?;
+    let new_password: String = ctx.arg(1)?;
+    let pool = crate::db::pool()?;
+    match sqlx::query("UPDATE users SET password_hash = $1 WHERE id = $2")
+        .bind(hash_password(&new_password))
+        .bind(id as i32)
+        .execute(&pool)
+        .await
+    {
+        Ok(_) => Ok(j!({ "success": true })),
+        Err(_) => Ok(j!({ "success": false, "error": "Erreur lors de la mise à jour du mot de passe." })),
+    }
+}