chirp-delete.go

package main

import (
	"log"
	"net/http"

	"github.com/google/uuid"
	"github.com/mdmdj/bootdev-chirpy/internal/auth"
	"github.com/mdmdj/bootdev-chirpy/internal/database"
)

func chirpDeleteOneRoute(w http.ResponseWriter, r *http.Request) {
	chirpID := r.PathValue("chirpID")
	chirpUUID, err := uuid.Parse(chirpID)

	if chirpID == "" || err != nil {
		log.Printf("Error deleting chirp, bad ID: %s", chirpID)
		respondWithError(w, http.StatusNotFound, "404 Chirp Not Found")
		return
	}

	token, err := auth.GetBearerToken(r.Header)
	if err != nil {
		log.Printf("Error in GetBearerToken: %s", err)
		respondWithError(w, http.StatusUnauthorized, "Something went wrong")
		return
	}

	userID, err := auth.ValidateJWT(token, cfg.secret)
	if err != nil {
		log.Printf("Error in ValidateJWT: %s", err)
		respondWithError(w, http.StatusUnauthorized, "Something went wrong")
		return
	}

	dbChirp, err := cfg.db.GetOneChirp(r.Context(), chirpUUID)
	if err != nil {
		log.Printf("Error deleting chirp, bad ID: %s", chirpID)
		respondWithError(w, http.StatusNotFound, "404 Chirp Not Found")
		return
	}

	if dbChirp.UserID != userID {
		log.Printf("Error deleting chirp, user is not the author: %s %s %s", dbChirp.ID, dbChirp.UserID, userID)
		respondWithError(w, http.StatusForbidden, "403 Not allowed to delete this chirp")
	}

	err = cfg.db.DeleteOneChirp(r.Context(), database.DeleteOneChirpParams{
		ID:     chirpUUID,
		UserID: userID})

	if err != nil {
		log.Printf("Error in DeleteOneChirp: %s", err)
		respondWithError(w, http.StatusInternalServerError, "Something went wrong")
		return
	}

	w.WriteHeader(http.StatusNoContent)

}