fleet/server/datastore/mysql/email_changes.go

package mysql

import (
	"database/sql"

	"github.com/jmoiron/sqlx"
	"github.com/pkg/errors"
)

func (ds *Datastore) PendingEmailChange(uid uint, newEmail, token string) error {
	sqlStatement := `
    INSERT INTO email_changes (
      user_id,
      token,
      new_email
    ) VALUES( ?, ?, ? )
  `
	_, err := ds.writer.Exec(sqlStatement, uid, token, newEmail)
	if err != nil {
		return errors.Wrap(err, "inserting email change record")
	}

	return nil
}

// ConfirmPendingEmailChange finds email change record, updates user with new email,
// then deletes change record if everything succeeds.
func (ds *Datastore) ConfirmPendingEmailChange(id uint, token string) (newEmail string, err error) {
	changeRecord := struct {
		ID       uint
		UserID   uint `db:"user_id"`
		Token    string
		NewEmail string `db:"new_email"`
	}{}
	err = ds.writer.Get(&changeRecord, "SELECT * FROM email_changes WHERE token = ? AND user_id = ?", token, id)
	if err != nil {
		if err == sql.ErrNoRows {
			return "", notFound("email change with token")
		}
		return "", errors.Wrap(err, "email change")
	}

	err = ds.withRetryTxx(func(tx *sqlx.Tx) error {
		query := `
    		UPDATE users SET
      			email = ?
    		WHERE id = ?
  `
		results, err := tx.Exec(query, changeRecord.NewEmail, changeRecord.UserID)
		if err != nil {
			return errors.Wrap(err, "updating user's email")
		}

		rowsAffected, err := results.RowsAffected()
		if err != nil {
			return errors.Wrap(err, "fetching affected rows updating user's email")
		}
		if rowsAffected == 0 {
			return notFound("User").WithID(changeRecord.UserID)
		}

		_, err = tx.Exec("DELETE FROM email_changes WHERE id = ?", changeRecord.ID)
		if err != nil {
			return errors.Wrap(err, "deleting email change")
		}

		return nil
	})

	if err != nil {
		return "", err
	}

	return changeRecord.NewEmail, err
}