feat(epic-4): synchro multi-appareils, outils d'admin et optimisations performance

internal/domain/user.go

@@ -15,12 +15,20 @@ type User struct {
 	IsAdmin      bool      `json:"is_admin"`
 	CreatedAt    time.Time `json:"created_at"`
 	UpdatedAt    time.Time `json:"updated_at"`
+	Role         string    `json:"role"`
 }
 
-// UserRepository defines the interface for user data access.
+const (
+	RoleAdmin = "admin"
+	RoleUser  = "user"
+)
+
+// UserRepository defines the interface for user persistence.ss.
 type UserRepository interface {
 	Create(user *User) error
 	GetByEmail(email string) (*User, error)
 	GetByID(id uuid.UUID) (*User, error)
 	Exists(email string) (bool, error)
+	List() ([]*User, error)
+	Delete(id uuid.UUID) error
 }

internal/handler/admin.go

@@ -0,0 +1,76 @@
+package handler
+
+import (
+	"net/http"
+
+	"github.com/go-chi/chi/v5"
+	"github.com/google/uuid"
+	"github.com/michael/flowreader/internal/domain"
+	"github.com/michael/flowreader/internal/service"
+)
+
+// AdminHandler handles administrative tasks.
+type AdminHandler struct {
+	userRepo    domain.UserRepository
+	authService *service.AuthService
+}
+
+// NewAdminHandler creates a new admin handler.
+func NewAdminHandler(userRepo domain.UserRepository, authService *service.AuthService) *AdminHandler {
+	return &AdminHandler{
+		userRepo:    userRepo,
+		authService: authService,
+	}
+}
+
+// ListUsers handles GET /api/v1/admin/users
+func (h *AdminHandler) ListUsers(w http.ResponseWriter, r *http.Request) {
+	users, err := h.userRepo.List()
+	if err != nil {
+		respondError(w, http.StatusInternalServerError, "Failed to list users")
+		return
+	}
+
+	respondJSON(w, http.StatusOK, users)
+}
+
+// DeleteUser handles DELETE /api/v1/admin/users/{id}
+func (h *AdminHandler) DeleteUser(w http.ResponseWriter, r *http.Request) {
+	userID, err := uuid.Parse(chi.URLParam(r, "id"))
+	if err != nil {
+		respondError(w, http.StatusBadRequest, "Invalid user ID")
+		return
+	}
+
+	// Logic to delete user and all associated data
+	if err := h.userRepo.Delete(userID); err != nil {
+		respondError(w, http.StatusInternalServerError, "Failed to delete user")
+		return
+	}
+
+	respondJSON(w, http.StatusOK, map[string]string{"message": "User deleted successfully"})
+}
+
+// AdminOnly middleware restricts access to admins.
+func (h *AdminHandler) AdminOnly(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		cookie, err := r.Cookie("session_id")
+		if err != nil {
+			respondError(w, http.StatusUnauthorized, "Not authenticated")
+			return
+		}
+
+		user, err := h.authService.GetUserByToken(cookie.Value)
+		if err != nil || user == nil {
+			respondError(w, http.StatusUnauthorized, "Invalid session")
+			return
+		}
+
+		if user.Role != domain.RoleAdmin {
+			respondError(w, http.StatusForbidden, "Admin access required")
+			return
+		}
+
+		next.ServeHTTP(w, r)
+	})
+}

internal/handler/article.go

@@ -9,6 +9,7 @@ import (
 	"github.com/michael/flowreader/internal/domain"
 	"github.com/michael/flowreader/internal/service"
 	"github.com/michael/flowreader/internal/utils"
+	"github.com/michael/flowreader/internal/ws"
 )
 
 // ArticleHandler handles article-related HTTP requests.
@@ -17,15 +18,17 @@ type ArticleHandler struct {
 	feedService *service.FeedService
 	authService *service.AuthService
 	sanitizer   *utils.ContentSanitizer
+	hub         *ws.Hub
 }
 
 // NewArticleHandler creates a new article handler.
-func NewArticleHandler(articleRepo domain.ArticleRepository, feedService *service.FeedService, authService *service.AuthService) *ArticleHandler {
+func NewArticleHandler(articleRepo domain.ArticleRepository, feedService *service.FeedService, authService *service.AuthService, hub *ws.Hub) *ArticleHandler {
 	return &ArticleHandler{
 		articleRepo: articleRepo,
 		feedService: feedService,
 		authService: authService,
 		sanitizer:   utils.NewContentSanitizer(),
+		hub:         hub,
 	}
 }
 
@@ -184,6 +187,14 @@ func (h *ArticleHandler) MarkRead(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// Broadcast update
+	if h.hub != nil {
+		h.hub.Broadcast("article_updated", map[string]interface{}{
+			"id":      articleID,
+			"is_read": true,
+		})
+	}
+
 	respondJSON(w, http.StatusOK, map[string]bool{"is_read": true})
 }
 
@@ -219,6 +230,14 @@ func (h *ArticleHandler) MarkUnread(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// Broadcast update
+	if h.hub != nil {
+		h.hub.Broadcast("article_updated", map[string]interface{}{
+			"id":      articleID,
+			"is_read": false,
+		})
+	}
+
 	respondJSON(w, http.StatusOK, map[string]bool{"is_read": false})
 }
 
@@ -254,6 +273,14 @@ func (h *ArticleHandler) ToggleFavorite(w http.ResponseWriter, r *http.Request)
 		return
 	}
 
+	// Broadcast update
+	if h.hub != nil {
+		h.hub.Broadcast("article_updated", map[string]interface{}{
+			"id":          articleID,
+			"is_favorite": !article.IsFavorite,
+		})
+	}
+
 	respondJSON(w, http.StatusOK, map[string]bool{"is_favorite": !article.IsFavorite})
 }
 

internal/repository/user.go

@@ -26,18 +26,30 @@ func NewUserRepository(pool *pgxpool.Pool) *UserRepository {
 func (r *UserRepository) Create(user *domain.User) error {
 	ctx := context.Background()
 
+	// Check if this is the first user
+	var count int
+	err := r.pool.QueryRow(ctx, "SELECT COUNT(*) FROM users").Scan(&count)
+	if err != nil {
+		return fmt.Errorf("counting users: %w", err)
+	}
+
+	if count == 0 {
+		user.Role = domain.RoleAdmin
+	} else if user.Role == "" {
+		user.Role = domain.RoleUser
+	}
+
 	query := `
-		INSERT INTO users (id, email, password_hash, is_admin, created_at, updated_at)
-		VALUES ($1, $2, $3, $4, $5, $6)
+		INSERT INTO users (id, email, password_hash, created_at, role)
+		VALUES ($1, $2, $3, $4, $5)
 	`
 
-	_, err := r.pool.Exec(ctx, query,
+	_, err = r.pool.Exec(ctx, query,
 		user.ID,
 		user.Email,
 		user.PasswordHash,
-		user.IsAdmin,
 		user.CreatedAt,
-		user.UpdatedAt,
+		user.Role,
 	)
 
 	if err != nil {
@@ -52,7 +64,7 @@ func (r *UserRepository) GetByEmail(email string) (*domain.User, error) {
 	ctx := context.Background()
 
 	query := `
-		SELECT id, email, password_hash, is_admin, created_at, updated_at
+		SELECT id, email, password_hash, created_at, role
 		FROM users
 		WHERE email = $1
 	`
@@ -62,9 +74,8 @@ func (r *UserRepository) GetByEmail(email string) (*domain.User, error) {
 		&user.ID,
 		&user.Email,
 		&user.PasswordHash,
-		&user.IsAdmin,
 		&user.CreatedAt,
-		&user.UpdatedAt,
+		&user.Role,
 	)
 
 	if err != nil {
@@ -82,7 +93,7 @@ func (r *UserRepository) GetByID(id uuid.UUID) (*domain.User, error) {
 	ctx := context.Background()
 
 	query := `
-		SELECT id, email, password_hash, is_admin, created_at, updated_at
+		SELECT id, email, password_hash, created_at, role
 		FROM users
 		WHERE id = $1
 	`
@@ -92,9 +103,8 @@ func (r *UserRepository) GetByID(id uuid.UUID) (*domain.User, error) {
 		&user.ID,
 		&user.Email,
 		&user.PasswordHash,
-		&user.IsAdmin,
 		&user.CreatedAt,
-		&user.UpdatedAt,
+		&user.Role,
 	)
 
 	if err != nil {
@@ -107,7 +117,40 @@ func (r *UserRepository) GetByID(id uuid.UUID) (*domain.User, error) {
 	return &user, nil
 }
 
-// Exists checks if a user with the given email exists.
+// List retrieves all users.
+func (r *UserRepository) List() ([]*domain.User, error) {
+	ctx := context.Background()
+	query := `SELECT id, email, created_at, role FROM users ORDER BY created_at ASC`
+
+	rows, err := r.pool.Query(ctx, query)
+	if err != nil {
+		return nil, fmt.Errorf("listing users: %w", err)
+	}
+	defer rows.Close()
+
+	var users []*domain.User
+	for rows.Next() {
+		var u domain.User
+		if err := rows.Scan(&u.ID, &u.Email, &u.CreatedAt, &u.Role); err != nil {
+			return nil, fmt.Errorf("scanning user: %w", err)
+		}
+		users = append(users, &u)
+	}
+
+	return users, nil
+}
+
+// Delete removes a user and their data (cascaded by DB).
+func (r *UserRepository) Delete(id uuid.UUID) error {
+	ctx := context.Background()
+	_, err := r.pool.Exec(ctx, "DELETE FROM users WHERE id = $1", id)
+	if err != nil {
+		return fmt.Errorf("deleting user: %w", err)
+	}
+	return nil
+}
+
+// Exists checks if an email already exists.
 func (r *UserRepository) Exists(email string) (bool, error) {
 	ctx := context.Background()