SocialPub/PrivaPub/Models/User/RootUser.cs

using MongoDB.Entities;

using System.ComponentModel.DataAnnotations;

namespace PrivaPub.Models.User
{
	public class RootUser : Entity
	{
		[StringLength(32)]
		public string UserName { get; set; }
		[EmailAddress]
		public string Email { get; set; }
		public bool IsEmailValidated { get; set; } = false;
		public bool IsBanned { get; set; } = false;
		public string HashedPassword { get; set; }
		public List<string> Policies { get; set; } = new() { ClientModels.Policies.IsUser };
		public RootUserSettings Settings { get; set; } = new();

		public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
		public DateTime UpdatedAt { get; set; } = DateTime.UtcNow;
		public DateTime? DeletedAt { get; set; }
		public DateTime? CredentialsChangedAt { get; set; }//when RootSessions last ended every session
		public string SessionStamp { get; set; }//carried by every /clientapi token; a new one ends the tokens issued before
		public List<EndedSession> EndedSessions { get; set; } = new();//sessions signed out one by one, until their tokens expire
		public RootTotp Totp { get; set; }//two-factor sign-in, when the login set it up (Services/TwoFactor.cs)

		/// <summary>An administrator is a moderator too (IsAdminPolicy asks for both); otherwise a plain user.</summary>
		public void SetAdmin(bool admin) => SetRole(admin ? RootRole.Admin : RootRole.User);

		/// <summary>The login's role, as its policies say it: every login is a user, a moderator is one too, and an
		/// administrator is all three.</summary>
		public void SetRole(RootRole role)
		{
			Policies.RemoveAll(p => p is ClientModels.Policies.IsAdmin or ClientModels.Policies.IsModerator);
			if (role is RootRole.Moderator or RootRole.Admin)
				Policies.Add(ClientModels.Policies.IsModerator);
			if (role == RootRole.Admin)
				Policies.Add(ClientModels.Policies.IsAdmin);
			if (!Policies.Contains(ClientModels.Policies.IsUser))
				Policies.Add(ClientModels.Policies.IsUser);
			UpdatedAt = DateTime.UtcNow;
		}

		public RootRole Role => Policies.Contains(ClientModels.Policies.IsAdmin) ? RootRole.Admin
			: Policies.Contains(ClientModels.Policies.IsModerator) ? RootRole.Moderator
			: RootRole.User;

		public static bool TryParseRole(string value, out RootRole role)
		{
			role = value?.Trim().ToLowerInvariant() switch
			{
				"user" => RootRole.User,
				"moderator" => RootRole.Moderator,
				"admin" or "administrator" => RootRole.Admin,
				_ => (RootRole)(-1)
			};
			return Enum.IsDefined(role);
		}
	}

	// never stored: a login's role lives in its Policies
	public enum RootRole
	{
		User,
		Moderator,
		Admin
	}

	// TOTP (RFC 6238: 30 s, 6 digits, SHA-1, as every authenticator app reads it). PendingSecret waits for its first code;
	// LastStep refuses a code used before; a recovery code is kept as its SHA-256 and works once.
	public class RootTotp
	{
		public string Secret { get; set; }//base32
		public DateTime? EnabledAt { get; set; }
		public long LastStep { get; set; }
		public List<string> RecoveryCodeHashes { get; set; } = new();
		public string PendingSecret { get; set; }
		public DateTime? PendingSince { get; set; }
	}

	// a session that signed out: its tokens carry Sid, and are refused until Until, when they would have expired anyway
	public class EndedSession
	{
		public string Sid { get; set; }
		public DateTime Until { get; set; }
	}

	public class RootUserSettings
	{
		public string LanguageCode { get; set; } = "en-GB";
		public DateTime? SavedAt { get; set; }//when a client last saved them; until then a client keeps its own

		public short IconsThemeIndexColour { get; set; } = 25;
		public short LightThemeIndexColour { get; set; } = 25;
		public short DarkThemeIndexColour { get; set; } = 215;
		public bool PreferSystemTheming { get; set; } = true;
		public bool ThemeIsDarkMode { get; set; } = false;
		public bool ThemeIsDarkGray { get; set; } = false;
		public bool ThemeIsLightGray { get; set; } = true;
	}
}