Add trust center access requests

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/trust/audit_service.go

@@ -17,7 +17,6 @@ package trust
 import (
 	"context"
 	"fmt"
-	"time"
 
 	"github.com/getprobo/probo/pkg/coredata"
 	"github.com/getprobo/probo/pkg/gid"
@@ -80,25 +79,3 @@ func (s AuditService) ListForOrganizationId(
 
 	return page.NewPage(audits, cursor), nil
 }
-
-func (s AuditService) GenerateReportURL(
-	ctx context.Context,
-	auditID gid.GID,
-	expiresIn time.Duration,
-) (*string, error) {
-	audit, err := s.Get(ctx, auditID)
-	if err != nil {
-		return nil, fmt.Errorf("cannot get audit: %w", err)
-	}
-
-	if audit.ReportID == nil {
-		return nil, fmt.Errorf("audit has no report")
-	}
-
-	url, err := s.svc.Reports.GenerateDownloadURL(ctx, *audit.ReportID, expiresIn)
-	if err != nil {
-		return nil, fmt.Errorf("cannot generate report download URL: %w", err)
-	}
-
-	return url, nil
-}

pkg/trust/trust_center_access_service.go

@@ -16,12 +16,17 @@ package trust
 
 import (
 	"context"
+	"errors"
 	"fmt"
+	"strings"
+	"time"
 
 	"github.com/getprobo/probo/pkg/coredata"
+	"github.com/getprobo/probo/pkg/gid"
 	"github.com/getprobo/probo/pkg/probo"
 	"github.com/getprobo/probo/pkg/statelesstoken"
 	"github.com/getprobo/probo/pkg/usrmgr"
+	"github.com/jackc/pgx/v5"
 	"go.gearno.de/kit/pg"
 )
 
@@ -30,6 +35,12 @@ type (
 		svc    *TenantService
 		usrmgr *usrmgr.Service
 	}
+
+	CreateTrustCenterAccessRequest struct {
+		TrustCenterID gid.GID
+		Email         string
+		Name          string
+	}
 )
 
 const (
@@ -56,6 +67,10 @@ func (s TrustCenterAccessService) ValidateToken(
 			return fmt.Errorf("cannot load trust center access: %w", err)
 		}
 
+		if !access.Active {
+			return fmt.Errorf("trust center access is not active")
+		}
+
 		return nil
 	})
 
@@ -65,3 +80,57 @@ func (s TrustCenterAccessService) ValidateToken(
 
 	return &token.Data, nil
 }
+
+func (s TrustCenterAccessService) Create(
+	ctx context.Context,
+	req *CreateTrustCenterAccessRequest,
+) (*coredata.TrustCenterAccess, error) {
+	if !strings.Contains(req.Email, "@") {
+		return nil, fmt.Errorf("invalid email address")
+	}
+
+	if req.Name == "" {
+		return nil, fmt.Errorf("name is required")
+	}
+
+	now := time.Now()
+
+	var access *coredata.TrustCenterAccess
+
+	err := s.svc.pg.WithTx(ctx, func(tx pg.Conn) error {
+		existingAccess := &coredata.TrustCenterAccess{}
+		err := existingAccess.LoadByTrustCenterIDAndEmail(ctx, tx, s.svc.scope, req.TrustCenterID, req.Email)
+
+		if err == nil {
+			if err := existingAccess.Delete(ctx, tx, s.svc.scope); err != nil {
+				return fmt.Errorf("cannot delete existing trust center access: %w", err)
+			}
+		}
+
+		if err != nil && !errors.Is(err, pgx.ErrNoRows) {
+			return fmt.Errorf("cannot load trust center access: %w", err)
+		}
+
+		access = &coredata.TrustCenterAccess{
+			ID:            gid.New(s.svc.scope.GetTenantID(), coredata.TrustCenterAccessEntityType),
+			TenantID:      s.svc.scope.GetTenantID(),
+			TrustCenterID: req.TrustCenterID,
+			Email:         req.Email,
+			Name:          req.Name,
+			Active:        false,
+			CreatedAt:     now,
+			UpdatedAt:     now,
+		}
+
+		if err := access.Insert(ctx, tx, s.svc.scope); err != nil {
+			return fmt.Errorf("cannot insert trust center access: %w", err)
+		}
+		return nil
+	})
+
+	if err != nil {
+		return nil, err
+	}
+
+	return access, nil
+}