Merge pull request #858 from utmstack/bugfix/v10.5.10/system-requires-at-least-one-admin-user

fix: Add validation to prevent deletion of the last admin user

Author: c3s4rfred

backend/src/main/java/com/park/utmstack/repository/UserRepository.java

@@ -37,6 +37,15 @@ public interface UserRepository extends JpaRepository<User, Long> {
 
     @Query(nativeQuery = true, value = "SELECT jhi_user.* FROM jhi_user WHERE jhi_user.id IN (SELECT jhi_user_authority.user_id FROM jhi_user_authority WHERE jhi_user_authority.authority_name = 'ROLE_ADMIN')")
     List<User> findAllAdmins();
+    @Query(nativeQuery = true, value = "SELECT jhi_user.* \n" +
+            "FROM jhi_user \n" +
+            "WHERE jhi_user.id IN (\n" +
+            "    SELECT jhi_user_authority.user_id \n" +
+            "    FROM jhi_user_authority \n" +
+            "    WHERE jhi_user_authority.authority_name = 'ROLE_ADMIN' AND jhi_user.activated = true\n" +
+            ") \n" +
+            "LIMIT 1")
+    Optional<User> findAnyAdminUser();
 
     @EntityGraph(attributePaths = "authorities")
     Optional<User> findOneWithAuthoritiesById(Long id);

backend/src/main/java/com/park/utmstack/security/internalApiKey/InternalApiKeyProvider.java

@@ -26,7 +26,7 @@ public InternalApiKeyProvider(UserRepository userRepository) {
     public UsernamePasswordAuthenticationToken getAuthentication(String apiKey) {
         final String ctx = CLASSNAME + ".getAuthentication";
         try {
-            com.park.utmstack.domain.User user = userRepository.findOneWithAuthoritiesByLogin(Constants.ADMIN_USER)
+            com.park.utmstack.domain.User user = userRepository.findAnyAdminUser()
                 .orElseThrow(() -> new RuntimeException("User not found"));
             List<SimpleGrantedAuthority> authorities = user.getAuthorities().stream().map(d -> new SimpleGrantedAuthority(d.getName()))
                 .collect(Collectors.toList());