Method Invite

internal/api/invite.go:20–106

Invite is the endpoint for inviting a new user

(w http.ResponseWriter, r *http.Request)

// Invite is the endpoint for inviting a new user
func (a *API) Invite(w http.ResponseWriter, r *http.Request) error {
	ctx := r.Context()
	db := a.db.WithContext(ctx)
	config := a.config
	adminUser := getAdminUser(ctx)
	params := &InviteParams{}
	if err := retrieveRequestParams(r, params); err != nil {
		return err
	}

	var err error
	params.Email, err = a.validateEmail(params.Email)
	if err != nil {
		return err
	}

	aud := a.requestAud(ctx, r)
	user, err := models.FindUserByEmailAndAudience(db, params.Email, aud)
	if err != nil && !models.IsNotFoundError(err) {
		return apierrors.NewInternalServerError("Database error finding user").WithInternalError(err)
	}

	isCreate := user == nil
	isConfirmed := user != nil && user.IsConfirmed()

	if isCreate {
		signupParams := SignupParams{
			Email:    params.Email,
			Data:     params.Data,
			Aud:      aud,
			Provider: "email",
		}

		// because params above sets no password, this method
		// is not computationally hard so it can be used within
		// a database transaction
		user, err = signupParams.ToUserModel(false /* <- isSSOUser */)
		if err != nil {
			return err
		}

		if err := a.triggerBeforeUserCreated(r, db, user); err != nil {
			return err
		}
	}

	err = db.Transaction(func(tx *storage.Connection) error {
		if !isCreate {
			if isConfirmed {
				return apierrors.NewUnprocessableEntityError(apierrors.ErrorCodeEmailExists, DuplicateEmailMsg)
			}
		} else {
			user, err = a.signupNewUser(tx, user)
			if err != nil {
				return err
			}
			identity, err := a.createNewIdentity(tx, user, "email", structs.Map(provider.Claims{
				Subject: user.ID.String(),