move api/server to api/edge/bff

api/edge/bff/internal/server/accountapiimp/delete.go

@@ -0,0 +1,130 @@
+package accountapiimp
+
+import (
+	"context"
+	"errors"
+	"net/http"
+
+	"github.com/tech/sendico/pkg/api/http/response"
+	"github.com/tech/sendico/pkg/merrors"
+	"github.com/tech/sendico/pkg/model"
+	"github.com/tech/sendico/pkg/mservice"
+	"github.com/tech/sendico/pkg/mutil/mzap"
+	"github.com/tech/sendico/server/interface/api/sresponse"
+	"go.mongodb.org/mongo-driver/v2/bson"
+	"go.uber.org/zap"
+)
+
+func (a *AccountAPI) deleteProfile(r *http.Request, account *model.Account, token *sresponse.TokenData) http.HandlerFunc {
+	ctx := r.Context()
+
+	// Get the current organization from the request context
+	orgRef, err := a.getCurrentOrganizationRef(r)
+	if err != nil {
+		a.logger.Warn("Failed to get current organization", zap.Error(err), mzap.StorableRef(account))
+		return response.BadRequest(a.logger, a.Name(), "invalid_organization_context", "Invalid organization context")
+	}
+
+	// Get the organization
+	var org model.Organization
+	if err := a.odb.Get(ctx, *account.GetID(), orgRef, &org); err != nil {
+		a.logger.Error("Failed to fetch organization", zap.Error(err), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	// Delete the account (this will check if it's the only member)
+	if err := a.accService.DeleteAccount(ctx, &org, account.ID); err != nil {
+		if errors.Is(err, merrors.ErrInvalidArg) {
+			a.logger.Warn("Cannot delete account - validation failed", zap.Error(err), mzap.StorableRef(account))
+			return response.BadRequest(a.logger, a.Name(), "validation_failed", err.Error())
+		}
+		a.logger.Error("Failed to delete account", zap.Error(err), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	a.logger.Info("Account deleted successfully", mzap.StorableRef(account))
+	return response.Success(a.logger)
+}
+
+func (a *AccountAPI) deleteOrganization(r *http.Request, account *model.Account, token *sresponse.TokenData) http.HandlerFunc {
+	ctx := r.Context()
+
+	// Get the current organization from the request context
+	orgRef, err := a.getCurrentOrganizationRef(r)
+	if err != nil {
+		a.logger.Warn("Failed to get current organization", zap.Error(err), mzap.StorableRef(account))
+		return response.BadRequest(a.logger, a.Name(), "invalid_organization_context", "Invalid organization context")
+	}
+
+	// Get the organization
+	var org model.Organization
+	if err := a.odb.Get(ctx, *account.GetID(), orgRef, &org); err != nil {
+		a.logger.Error("Failed to fetch organization", zap.Error(err), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	// Delete the organization and all its data
+	if err := a.accService.DeleteOrganization(ctx, &org); err != nil {
+		a.logger.Error("Failed to delete organization", zap.Error(err), mzap.StorableRef(&org))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	a.logger.Info("Organization deleted successfully", mzap.StorableRef(&org))
+	return response.Success(a.logger)
+}
+
+func (a *AccountAPI) deleteAll(r *http.Request, account *model.Account, token *sresponse.TokenData) http.HandlerFunc {
+	ctx := r.Context()
+
+	// Get the current organization from the request context
+	orgRef, err := a.getCurrentOrganizationRef(r)
+	if err != nil {
+		a.logger.Warn("Failed to get current organization", zap.Error(err), mzap.StorableRef(account))
+		return response.BadRequest(a.logger, a.Name(), "invalid_organization_context", "Invalid organization context")
+	}
+
+	// Get the organization
+	var org model.Organization
+	if err := a.odb.Get(ctx, *account.GetID(), orgRef, &org); err != nil {
+		a.logger.Error("Failed to fetch organization", zap.Error(err), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	// Get organization permission reference
+	var orgPolicy model.PolicyDescription
+	if err := a.plcdb.GetBuiltInPolicy(ctx, mservice.Organizations, &orgPolicy); err != nil {
+		a.logger.Error("Failed to fetch organization policy", zap.Error(err), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	// Check if user has permission to delete the organization
+	canDelete, err := a.enf.Enforce(ctx, orgPolicy.ID, account.ID, orgRef, bson.NilObjectID, model.ActionDelete)
+	if err != nil {
+		a.logger.Error("Failed to check delete permission", zap.Error(err), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+	if !canDelete {
+		a.logger.Warn("User does not have permission to delete organization", mzap.StorableRef(account), mzap.StorableRef(&org))
+		return response.AccessDenied(a.logger, a.Name(), "Insufficient permissions to delete organization")
+	}
+
+	// Delete everything (organization + account)
+	if _, err := a.tf.CreateTransaction().Execute(ctx, func(c context.Context) (any, error) {
+		if err := a.accService.DeleteAll(c, &org, account.ID); err != nil {
+			a.logger.Warn("Failed to delete all data", zap.Error(err), mzap.StorableRef(&org), mzap.StorableRef(account))
+			return nil, err
+		}
+		return nil, nil
+	}); err != nil {
+		a.logger.Warn("Failed to execute delete transaction", zap.Error(err), mzap.StorableRef(&org), mzap.StorableRef(account))
+		return response.Auto(a.logger, a.Name(), err)
+	}
+
+	a.logger.Info("All data deleted successfully", mzap.StorableRef(&org), mzap.StorableRef(account))
+	return response.Success(a.logger)
+}
+
+// Helper method to get current organization reference from request context
+func (a *AccountAPI) getCurrentOrganizationRef(r *http.Request) (bson.ObjectID, error) {
+	return a.oph.GetRef(r)
+}