Writeopia · leandroBorgesFerreira · Jun 16, 2025 · Jun 16, 2025 · Jun 16, 2025 · Jun 16, 2025
diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
@@ -32,7 +32,7 @@ jobs:
     env:
       isCI: "true"
       IN_MEMORY_DATABASE: 'true'
-      DB_USER: 'user'
+      DB_USER: 'postgres'
       WRITEOPIA_FIREBASE_ID: 'id'
       WRITEOPIA_CLIENT_BASE_URL: "baseurl"
       JWT_SECRET: "testingsecret"
@@ -77,7 +77,7 @@ jobs:
     env:
       isCI: "true"
       IN_MEMORY_DATABASE: 'true'
-      DB_USER: 'user'
+      DB_USER: 'postgres'
       WRITEOPIA_FIREBASE_ID: 'id'
       WRITEOPIA_CLIENT_BASE_URL: "baseurl"
       JWT_SECRET: "testingsecret"
@@ -138,7 +138,7 @@ jobs:
     env:
       isCI: "true"
       IN_MEMORY_DATABASE: 'true'
-      DB_USER: 'user'
+      DB_USER: 'postgres'
       WRITEOPIA_FIREBASE_ID: 'id'
       WRITEOPIA_CLIENT_BASE_URL: "baseurl"
       JWT_SECRET: "testingsecret"

diff --git a/backend/core/auth/src/main/java/io/writeopia/api/core/auth/repository/UserRepository.kt b/backend/core/auth/src/main/java/io/writeopia/api/core/auth/repository/UserRepository.kt
@@ -95,3 +95,11 @@ fun WriteopiaDbBackend.deleteUserById(id: String) {
 fun WriteopiaDbBackend.deleteUserByEmail(email: String) {
     this.userEntityQueries.deleteUserByEmail(email)
 }
+
+fun WriteopiaDbBackend.enableUserByEmail(email: String) {
+    this.userEntityQueries.enableUserByEmail(email)
+}
+
+fun WriteopiaDbBackend.disableUserByEmail(email: String) {
+    this.userEntityQueries.disableUserByEmail(email)
+}
diff --git a/backend/core/auth/src/main/java/io/writeopia/api/core/auth/routing/AdminRouting.kt b/backend/core/auth/src/main/java/io/writeopia/api/core/auth/routing/AdminRouting.kt
@@ -0,0 +1,43 @@
+package io.writeopia.api.core.auth.routing
+
+import io.ktor.http.HttpStatusCode
+import io.ktor.server.request.header
+import io.ktor.server.response.respond
+import io.ktor.server.routing.Route
+import io.ktor.server.routing.RoutingContext
+import io.ktor.server.routing.post
+import io.ktor.server.routing.route
+import io.writeopia.api.core.auth.repository.disableUserByEmail
+import io.writeopia.api.core.auth.repository.enableUserByEmail
+import io.writeopia.sql.WriteopiaDbBackend
+
+fun Route.adminProtectedRoute(apiKey: String, writeopiaDb: WriteopiaDbBackend) {
+    route("/admin") {
+        post("/enable-user/{userEmail}") {
+            val providedKey = call.request.header("X-Admin-Key")
+            adminUserFn(apiKey, providedKey, writeopiaDb::enableUserByEmail)
+        }
+
+        post("/disable-user/{userEmail}") {
+            val providedKey = call.request.header("X-Admin-Key")
+            adminUserFn(apiKey, providedKey, writeopiaDb::disableUserByEmail)
+        }
+    }
+}
+
+suspend fun RoutingContext.adminUserFn(
+    apiKey: String,
+    providedKey: String?,
+    func: suspend (String) -> Unit
+) {
+    if (providedKey != apiKey) {
+        call.respond(HttpStatusCode.Unauthorized, "Invalid admin key")
+    } else {
+        val userEmail = call.parameters["userEmail"]
+            ?: return call.respond(HttpStatusCode.BadRequest)
+
+        func(userEmail)
+
+        call.respond(HttpStatusCode.OK, "User $userEmail enabled")
+    }
+}
diff --git a/...io/writeopia/api/core/auth/AuthRouting.kt → ...opia/api/core/auth/routing/AuthRouting.kt b/...io/writeopia/api/core/auth/AuthRouting.kt → ...opia/api/core/auth/routing/AuthRouting.kt
@@ -1,4 +1,4 @@
-package io.writeopia.api.core.auth
+package io.writeopia.api.core.auth.routing
 
 import io.ktor.http.HttpStatusCode
 import io.ktor.server.auth.authenticate
@@ -13,6 +13,8 @@ import io.ktor.server.routing.delete
 import io.ktor.server.routing.get
 import io.ktor.server.routing.post
 import io.ktor.server.routing.put
+import io.writeopia.api.core.auth.AuthService
+import io.writeopia.api.core.auth.JwtConfig
 import io.writeopia.api.core.auth.hash.HashUtils
 import io.writeopia.api.core.auth.models.toApi
 import io.writeopia.api.core.auth.repository.deleteUserById

diff --git a/backend/core/database/src/main/sqldelight/io/writeopia/sql/UserEntity.sq b/backend/core/database/src/main/sqldelight/io/writeopia/sql/UserEntity.sq
@@ -2,7 +2,7 @@ CREATE TABLE user_entity (
   id TEXT PRIMARY KEY,
   name TEXT NOT NULL,
   created_at BIGINT NOT NULL,
-  email TEXT NOT NULL,
+  email TEXT NOT NULL UNIQUE,
   password TEXT NOT NULL,
   salt TEXT NOT NULL,
   enabled BOOLEAN NOT NULL,
@@ -42,3 +42,14 @@ deleteUserByEmail:
 DELETE
 FROM user_entity
 WHERE email = ?;
+
+enableUserByEmail:
+UPDATE user_entity
+SET enabled = TRUE
+WHERE email = ?;
+
+disableUserByEmail:
+UPDATE user_entity
+SET enabled = FALSE
+WHERE email = ?;
+
diff --git a/.../documents/documents/src/main/java/io/writeopia/api/documents/routing/DocumentsRouting.kt b/.../documents/documents/src/main/java/io/writeopia/api/documents/routing/DocumentsRouting.kt
@@ -7,7 +7,7 @@ import io.ktor.server.routing.Routing
 import io.ktor.server.routing.get
 import io.ktor.server.routing.post
 import io.ktor.server.routing.route
-import io.writeopia.api.core.auth.getUserId
+import io.writeopia.api.core.auth.routing.getUserId
 import io.writeopia.api.documents.documents.DocumentsService
 import io.writeopia.sdk.serialization.json.SendDocumentsRequest
 import io.writeopia.api.documents.documents.repository.folderDiff

diff --git a/backend/gateway/src/main/kotlin/io/writeopia/api/geteway/Application.kt b/backend/gateway/src/main/kotlin/io/writeopia/api/geteway/Application.kt
@@ -20,10 +20,11 @@ fun main() {
 fun Application.module(
     writeopiaDb: WriteopiaDbBackend? = configurePersistence(),
     useAi: Boolean = System.getenv("WRITEOPIA_USE_AI")?.toBoolean() ?: false,
-    debugMode: Boolean = System.getenv("WRITEOPIA_DEBUG_MODE")?.toBoolean() ?: false
+    debugMode: Boolean = System.getenv("WRITEOPIA_DEBUG_MODE")?.toBoolean() ?: false,
+    adminKey: String? = System.getenv("WRITEOPIA_ADMIN_KEY")
 ) {
     installAuth()
-    configureRouting(writeopiaDb, useAi, debugMode = debugMode)
+    configureRouting(writeopiaDb, useAi, debugMode = debugMode, adminKey = adminKey)
     configureSerialization()
     configureEditorSockets()
     configureHTTP()

diff --git a/backend/gateway/src/main/kotlin/io/writeopia/api/geteway/Routing.kt b/backend/gateway/src/main/kotlin/io/writeopia/api/geteway/Routing.kt
@@ -3,28 +3,30 @@ package io.writeopia.api.geteway
 import io.ktor.server.application.Application
 import io.ktor.server.response.respondText
 import io.ktor.server.routing.get
-import io.ktor.server.routing.route
 import io.ktor.server.routing.routing
-import io.writeopia.api.core.auth.authRoute
+import io.writeopia.api.core.auth.routing.adminProtectedRoute
+import io.writeopia.api.core.auth.routing.authRoute
 import io.writeopia.api.documents.routing.documentsRoute
 import io.writeopia.sql.WriteopiaDbBackend
 
 fun Application.configureRouting(
     writeopiaDb: WriteopiaDbBackend?,
     useAi: Boolean,
-    debugMode: Boolean = false
+    debugMode: Boolean = false,
+    adminKey: String?
 ) {
     routing {
         if (writeopiaDb != null) {
             documentsRoute(writeopiaDb, useAi, debugMode)
+            authRoute(writeopiaDb, debugMode)
+
+            if (adminKey != null) {
+                adminProtectedRoute(adminKey, writeopiaDb)
+            }
         }
 
         get {
             call.respondText("Hi")
         }
-
-        if (writeopiaDb != null) {
-            authRoute(writeopiaDb, debugMode)
-        }
     }
 }
diff --git a/docker/postgres/init.sql b/docker/postgres/init.sql
@@ -37,7 +37,7 @@ CREATE TABLE user_entity (
   id TEXT PRIMARY KEY,
   name TEXT NOT NULL,
   created_at BIGINT NOT NULL,
-  email TEXT NOT NULL,
+  email TEXT NOT NULL UNIQUE,
   password TEXT NOT NULL,
   salt TEXT NOT NULL,
   enabled BOOLEAN NOT NULL,