Method syncUserInbounds

internal/serverapi/users.go:746–802

syncUserInbounds reconciles a user's inbound assignments. Returns affected node IDs.

(userID string, selectedIDs []string)

// syncUserInbounds reconciles a user's inbound assignments. Returns affected node IDs.
func (a *userAPI) syncUserInbounds(userID string, selectedIDs []string) ([]string, error) {
	wantedInbounds := make(map[string]inbounds.Inbound)
	for _, ibID := range selectedIDs {
		ib, err := a.inboundStore.GetInbound(ibID)
		if err != nil {
			continue
		}
		wantedInbounds[ibID] = ib
	}

	existing, err := a.users.ListUserInboundsByUser(userID)
	if err != nil {
		return nil, err
	}
	existingByInbound := make(map[string]users.UserInbound, len(existing))
	for _, acc := range existing {
		existingByInbound[acc.InboundID] = acc
	}

	changedNodeIDs := make(map[string]struct{})

	for ibID, ib := range wantedInbounds {
		if _, ok := existingByInbound[ibID]; !ok {
			secret := randomToken(12)
			if ib.Protocol == "shadowsocks" && strings.HasPrefix(ib.Method, "2022-") {
				secret = ssPassword(ib.Method)
			}
			acc := users.UserInbound{
				ID:        idgen.NextString(),
				UserID:    userID,
				InboundID: ibID,
				NodeID:    ib.NodeID,
				UUID:      randomUUID(),
				Secret:    secret,
			}
			if _, err := a.users.UpsertUserInbound(acc); err != nil {
				return nil, err
			}
			changedNodeIDs[ib.NodeID] = struct{}{}
		}
	}

	for ibID, acc := range existingByInbound {
		if _, wanted := wantedInbounds[ibID]; !wanted {
			if err := a.users.DeleteUserInbound(acc.ID); err != nil {
				return nil, err
			}
			changedNodeIDs[acc.NodeID] = struct{}{}
		}
	}

	affected := make([]string, 0, len(changedNodeIDs))
	for id := range changedNodeIDs {
		affected = append(affected, id)
	}
	return affected, nil
}