swamphacks
diff --git a/‎apps/api/internal/api/api.go‎
Lines changed: 16 additions & 1 deletion b/‎apps/api/internal/api/api.go‎
Lines changed: 16 additions & 1 deletion
diff --git a/‎apps/api/internal/api/handlers/events.go‎
Lines changed: 94 additions & 1 deletion b/‎apps/api/internal/api/handlers/events.go‎
Lines changed: 94 additions & 1 deletion
diff --git a/‎apps/api/internal/api/middleware/auth.go‎
Lines changed: 29 additions & 0 deletions b/‎apps/api/internal/api/middleware/auth.go‎
Lines changed: 29 additions & 0 deletions
diff --git a/‎apps/api/internal/config/config.go‎
Lines changed: 2 additions & 0 deletions b/‎apps/api/internal/config/config.go‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎apps/api/internal/db/queries/event_roles.sql‎
Lines changed: 9 additions & 0 deletions b/‎apps/api/internal/db/queries/event_roles.sql‎
Lines changed: 9 additions & 0 deletions
diff --git a/‎apps/api/internal/db/repository/events.go‎
Lines changed: 16 additions & 0 deletions b/‎apps/api/internal/db/repository/events.go‎
Lines changed: 16 additions & 0 deletions
diff --git a/‎apps/api/internal/db/sqlc/event_roles.sql.go‎
Lines changed: 22 additions & 0 deletions b/‎apps/api/internal/db/sqlc/event_roles.sql.go‎
Lines changed: 22 additions & 0 deletions
diff --git a/‎apps/api/internal/email/templates/WaitlistAcceptanceEmail.html‎
Lines changed: 1 addition & 1 deletion b/‎apps/api/internal/email/templates/WaitlistAcceptanceEmail.html‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎apps/api/internal/services/events.go‎
Lines changed: 10 additions & 0 deletions b/‎apps/api/internal/services/events.go‎
Lines changed: 10 additions & 0 deletions
diff --git a/‎apps/api/internal/services/redeemables.go‎
Lines changed: 4 additions & 0 deletions b/‎apps/api/internal/services/redeemables.go‎
Lines changed: 4 additions & 0 deletions
@@ -77,6 +77,19 @@ func (api *API) setupRoutes(mw *mw.Middleware) {
 		fmt.Fprintln(w, htmlContent)
 	})
 
+	api.Router.Route("/mobile", func(r chi.Router) {
+		// This means you have to set a Authorization header with "Key xxx".
+		r.Use(mw.Auth.RequireMobileAuth)
+
+		r.Get("/events/{eventId}/users/{userId}", api.Handlers.Event.GetUserForEvent)
+		r.Get("/events/{eventId}/users/by-rfid/{rfid}", api.Handlers.Event.GetUserByRFID)
+		r.Post("/events/{eventId}/checkin", api.Handlers.Admission.HandleEventCheckIn)
+
+		r.Get("/events/{eventId}/redeemables", api.Handlers.Redeemables.GetRedeemables)
+		r.Post("/redeemables/{redeemableId}/users/{userId}", api.Handlers.Redeemables.RedeemRedeemable)
+		r.Post("/events/{eventId}/users/{userId}/update-rfid", api.Handlers.Event.UpdateUserRFID)
+	})
+
 	// Health check
 	api.Router.Get("/ping", func(w http.ResponseWriter, r *http.Request) {
 		api.Logger.Trace().Str("method", r.Method).Str("path", r.URL.Path).Msg("Received ping.")
@@ -152,6 +165,8 @@ func (api *API) setupRoutes(mw *mw.Middleware) {
 			r.With(ensureEventStaff).Get("/users/{userId}", api.Handlers.Event.GetUserForEvent)
 			// Get user ID by RFID
 			r.With(ensureEventStaff).Get("/users/by-rfid/{rfid}", api.Handlers.Event.GetUserByRFID)
+			// Is the user checked in
+			r.With(ensureEventStaff).Get("/users/{userId}/checked-in-status", api.Handlers.Event.GetCheckedInStatusByIds)
 
 			// Admin-only
 			r.With(ensureEventAdmin).Post("/queue-confirmation-email", api.Handlers.Email.QueueConfirmationEmail)
@@ -225,7 +240,7 @@ func (api *API) setupRoutes(mw *mw.Middleware) {
 				// Update and delete specific redeemable
 				r.Route("/{redeemableId}", func(r chi.Router) {
 					r.Patch("/", api.Handlers.Redeemables.UpdateRedeemable)
-					r.Delete("/", api.Handlers.Redeemables.DeleteRedeemable)
+					r.With(ensureEventAdmin).Delete("/", api.Handlers.Redeemables.DeleteRedeemable)
 
 					r.Route("/users/{userId}", func(r chi.Router) {
 						r.Post("/", api.Handlers.Redeemables.RedeemRedeemable)
 
@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"io"
 	"net/http"
+	"strconv"
 	"time"
 
 	"github.com/go-chi/chi/v5"
@@ -865,4 +866,96 @@ func (h *EventHandler) GetUserByRFID(w http.ResponseWriter, r *http.Request) {
 
 	// Return just the user ID as a simple JSON object
 	res.Send(w, http.StatusOK, map[string]string{"user_id": user.ID.String()})
-}
+}
+
+// Get User by RFID
+//
+//	@Summary		Retrieves a user's ID by their RFID
+//	@Description	Looks up a user's ID by their RFID code for a specific event. Returns the user ID which can be used for other operations.
+//	@Tags			Event
+//	@Produce		json
+//	@Param			eventId	path		string	true	"Event ID"	Format(uuid)
+//	@Param			rfid	path		string	true	"RFID code (10 digits)"
+//	@Success		200		{object}	map[string]string	"OK - Returns user ID"
+//	@Failure		400		{object}	response.ErrorResponse	"Bad request/Malformed request."
+//	@Failure		404		{object}	response.ErrorResponse	"User not found with the provided RFID"
+//	@Failure		500		{object}	response.ErrorResponse	"Server Error: error getting user by RFID"
+//	@Router			/events/{eventId}/users/by-rfid/{rfid} [get]
+func (h *EventHandler) GetCheckedInStatusByIds(w http.ResponseWriter, r *http.Request) {
+	eventId, err := web.PathParamToUUID(r, "eventId")
+	if err != nil {
+		res.SendError(w, http.StatusBadRequest, res.NewError("missing_event_id", "The event ID is missing from the URL!"))
+		return
+	}
+
+	userId, err := web.PathParamToUUID(r, "userId")
+	if err != nil {
+		res.SendError(w, http.StatusBadRequest, res.NewError("missing_user_id", "The user ID is missing from the URL!"))
+		return
+	}
+	result, err := h.eventService.GetCheckedInStatusByIds(r.Context(), userId, eventId)
+	if err != nil {
+		res.SendError(w, http.StatusNotFound, res.NewError("error", "Something went wrong internally."))
+		return
+	}
+	// Return just the checked in status as a simple JSON object
+	res.Send(w, http.StatusOK, map[string]string{
+		"checked_in_status": strconv.FormatBool(result),
+	})
+}
+
+type UpdateRFID struct {
+	RFID string `json:"rfid"`
+}
+
+// UpdateUserRFID
+//
+//	@Summary		Updates a user's RFID tag
+//	@Description	Associates a new RFID string with a specific user for the given event. This overwrites any existing RFID association.
+//	@Tags			Event
+//	@Accept			json
+//	@Produce		json
+//	@Param			eventId	path		string			true	"Event ID"	Format(uuid)
+//	@Param			userId	path		string			true	"User ID"	Format(uuid)
+//	@Param			body	body		UpdateRFID		true	"New RFID data"
+//	@Success		204		"No Content - RFID updated successfully"
+//	@Failure		400		{object}	response.ErrorResponse	"Invalid request body or UUID format"
+//	@Failure		404		{object}	response.ErrorResponse	"User or Event not found"
+//	@Failure		500		{object}	response.ErrorResponse	"Internal server error"
+//	@Router			/events/{eventId}/users/{userId}/update-rfid [post]
+func (h *EventHandler) UpdateUserRFID(w http.ResponseWriter, r *http.Request) {
+	eventId, err := web.PathParamToUUID(r, "eventId")
+	if err != nil {
+		res.SendError(w, http.StatusBadRequest, res.NewError("missing_event_id", "The event ID is missing from the URL!"))
+		return
+	}
+
+	userId, err := web.PathParamToUUID(r, "userId")
+	if err != nil {
+		res.SendError(w, http.StatusBadRequest, res.NewError("missing_user_id", "The user ID is missing from the URL!"))
+		return
+	}
+
+	var payload UpdateRFID
+	err = json.NewDecoder(r.Body).Decode(&payload)
+	if err != nil {
+		res.SendError(w, http.StatusBadRequest, res.NewError("body_malformed", "Invalid body"))
+		return
+	}
+	defer r.Body.Close()
+
+	if payload.RFID == "" {
+		res.SendError(w, http.StatusBadRequest, res.NewError("body_malformed", "Invalid body"))
+		return
+	}
+
+	tempRole := sqlc.EventRoleTypeAttendee
+
+	err = h.eventService.UpdateEventRoleByIds(r.Context(), userId, eventId, &tempRole, nil, &payload.RFID)
+	if err != nil {
+		res.SendError(w, http.StatusNotFound, res.NewError("error", "Something went wrong internally."))
+		return
+	}
+
+	w.WriteHeader(http.StatusNoContent)
+}
@@ -6,6 +6,7 @@ import (
 	"errors"
 	"net/http"
 	"slices"
+	"strings"
 	"time"
 
 	"github.com/google/uuid"
@@ -69,6 +70,34 @@ func NewAuthMiddleware(db *db.DB, logger zerolog.Logger, cfg *config.Config) *Au
 	}
 }
 
+func (m *AuthMiddleware) RequireMobileAuth(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		m.logger.Trace().Msg("Incoming mobile request")
+
+		auth := r.Header.Get("Authorization")
+		if auth == "" {
+			m.logger.Warn().Msg("Authorization header is empty.")
+			response.SendError(w, http.StatusUnauthorized, response.NewError("no_auth", "You are not authorized"))
+			return
+		}
+
+		parts := strings.SplitN(auth, " ", 2)
+		if len(parts) != 2 {
+			m.logger.Warn().Msg("Authorization header is malformed > 2 parts")
+			response.SendError(w, http.StatusUnauthorized, response.NewError("no_auth", "You are not authorized"))
+			return
+		}
+
+		if parts[0] != "Key" || parts[1] != m.cfg.MobileAuthKey {
+			m.logger.Warn().Msg("Authorization header is not a valid value")
+			response.SendError(w, http.StatusUnauthorized, response.NewError("no_auth", "You are not authorized"))
+			return
+		}
+
+		next.ServeHTTP(w, r)
+	})
+}
+
 func (m *AuthMiddleware) RequireAuth(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		m.logger.Trace().Msg("Checking auth status")
 
@@ -75,6 +75,8 @@ type Config struct {
 	CoreBuckets CoreBuckets      `envPrefix:"CORE_BUCKETS_"`
 	Smtp        SmtpConfig       `envPrefix:"SMTP_"`
 	AWS         AWSConfig        `envPrefix:"AWS_"`
+
+	MobileAuthKey string `env:"MOBILE_AUTH_KEY"`
 }
 
 func Load() *Config {
 
@@ -71,3 +71,12 @@ FROM auth.users u
 JOIN event_roles er ON u.id = er.user_id
 WHERE er.event_id = $1
   AND er.rfid = $2;
+
+-- name: GetCheckedInStatusByIds :one
+SELECT EXISTS (
+    SELECT 1 
+    FROM event_roles 
+    WHERE user_id = $1 
+      AND event_id = $2 
+      AND checked_in_at IS NOT NULL
+)::bool;
@@ -16,6 +16,7 @@ var (
 	ErrDuplicateEvent        = errors.New("event already exists in database")
 	ErrNoEventsDeleted       = errors.New("no events deleted")
 	ErrMultipleEventsDeleted = errors.New("multiple events affected by delete query while only expecting one to delete one")
+	ErrUserEventNotFound     = errors.New("the user and event id combination was not found")
 	ErrUnknown               = errors.New("an unkown error was caught")
 )
 
@@ -206,6 +207,21 @@ func (r *EventRepository) GetEventRoleByDiscordIDAndEventId(ctx context.Context,
 	return &eventRole, nil
 }
 
+func (r *EventRepository) GetCheckedInStatusByUserIdAndEventId(ctx context.Context, userId uuid.UUID, eventId uuid.UUID) (bool, error) {
+	params := sqlc.GetCheckedInStatusByIdsParams{
+		UserID:  userId,
+		EventID: eventId,
+	}
+
+	result, err := r.db.Query.GetCheckedInStatusByIds(ctx, params)
+
+	if err != nil {
+		return false, err
+	}
+
+	return result, nil
+}
+
 func (r *EventRepository) GetAttendeeUserIdsByEventId(ctx context.Context, eventID uuid.UUID) ([]uuid.UUID, error) {
 	return r.db.Query.GetAttendeeUserIdsByEventId(ctx, eventID)
 }
@@ -39,7 +39,7 @@ <h2 style="margin:0; font-size:22px; color:#1a1a1a;">Hi {{ .Name }},</h2>
               </p>
 
               <p style="margin:0 0 15px 0; font-size:16px;">
-                You have <strong><span style="color:#CC0000;">72 hours</span></strong> to confirm your spot. If you
+                You have <strong><span style="color:#CC0000;">24 hours</span></strong> to confirm your spot. If you
                 don’t,
                 you’ll be moved back to the
                 waitlist to make room for others.
 
@@ -422,3 +422,13 @@ func (s *EventService) GetUserInfoForEvent(ctx context.Context, userId, eventId
 
 	return result, nil
 }
+
+func (s *EventService) GetCheckedInStatusByIds(ctx context.Context, userId uuid.UUID, eventId uuid.UUID) (bool, error) {
+	result, err := s.eventRepo.GetCheckedInStatusByUserIdAndEventId(ctx, userId, eventId)
+	if err != nil {
+		s.logger.Err(err).Msg("Failed to get user by ids")
+		return false, err
+	}
+	return result, nil
+
+}
@@ -60,6 +60,10 @@ func (s *RedeemablesService) UpdateRedeemable(ctx context.Context, redeemableID
 }
 
 func (s *RedeemablesService) RedeemRedeemable(ctx context.Context, redeemableID uuid.UUID, userID uuid.UUID) error {
+	// Need to do a check to see if the user is checked in
+	// Probably need event service
+
+	// CREATE NEW SQL function for getting checked in status
 	_, err := s.redeemablesRepo.RedeemRedeemable(ctx, redeemableID, userID)
 
 	if err != nil {
Original file line number	Diff line number	Diff line change
`@@ -75,6 +75,8 @@ type Config struct {`
`75`	`75`	CoreBuckets CoreBuckets `envPrefix:"CORE_BUCKETS_"`
`76`	`76`	Smtp SmtpConfig `envPrefix:"SMTP_"`
`77`	`77`	AWS AWSConfig `envPrefix:"AWS_"`
	`78`	`+`
	`79`	+ MobileAuthKey string `env:"MOBILE_AUTH_KEY"`
`78`	`80`	`}`
`79`	`81`
`80`	`82`	`func Load() *Config {`
Original file line number	Diff line number	Diff line change
`@@ -60,6 +60,10 @@ func (s *RedeemablesService) UpdateRedeemable(ctx context.Context, redeemableID`
`60`	`60`	`}`
`61`	`61`
`62`	`62`	`func (s *RedeemablesService) RedeemRedeemable(ctx context.Context, redeemableID uuid.UUID, userID uuid.UUID) error {`
	`63`	`+ // Need to do a check to see if the user is checked in`
	`64`	`+ // Probably need event service`
	`65`	`+`
	`66`	`+ // CREATE NEW SQL function for getting checked in status`
`63`	`67`	`_, err := s.redeemablesRepo.RedeemRedeemable(ctx, redeemableID, userID)`
`64`	`68`
`65`	`69`	`if err != nil {`