muscl/src/server/sql/database_operations.rs

use std::collections::BTreeMap;

use sqlx::MySqlConnection;
use sqlx::prelude::*;

use serde::{Deserialize, Serialize};

use crate::core::protocol::CompleteDatabaseNameResponse;
use crate::core::types::MySQLDatabase;
use crate::{
    core::{
        common::UnixUser,
        protocol::{
            CreateDatabaseError, CreateDatabasesResponse, DropDatabaseError, DropDatabasesResponse,
            ListAllDatabasesError, ListAllDatabasesResponse, ListDatabasesError,
            ListDatabasesResponse,
        },
    },
    server::{
        common::create_user_group_matching_regex,
        input_sanitization::{quote_identifier, validate_name, validate_ownership_by_unix_user},
    },
};

// NOTE: this function is unsafe because it does no input validation.
pub(super) async fn unsafe_database_exists(
    database_name: &str,
    connection: &mut MySqlConnection,
) -> Result<bool, sqlx::Error> {
    let result =
        sqlx::query("SELECT SCHEMA_NAME FROM information_schema.SCHEMATA WHERE SCHEMA_NAME = ?")
            .bind(database_name)
            .fetch_optional(connection)
            .await;

    if let Err(err) = &result {
        tracing::error!(
            "Failed to check if database '{}' exists: {:?}",
            &database_name,
            err
        );
    }

    Ok(result?.is_some())
}

pub async fn complete_database_name(
    database_prefix: String,
    unix_user: &UnixUser,
    connection: &mut MySqlConnection,
    _db_is_mariadb: bool,
) -> CompleteDatabaseNameResponse {
    let result = sqlx::query(
        r#"
          SELECT CAST(`SCHEMA_NAME` AS CHAR(64)) AS `database`
          FROM `information_schema`.`SCHEMATA`
          WHERE `SCHEMA_NAME` NOT IN ('information_schema', 'performance_schema', 'mysql', 'sys')
            AND `SCHEMA_NAME` REGEXP ?
            AND `SCHEMA_NAME` LIKE ?
        "#,
    )
    .bind(create_user_group_matching_regex(unix_user))
    .bind(format!("{}%", database_prefix))
    .fetch_all(connection)
    .await;

    match result {
        Ok(rows) => rows
            .into_iter()
            .filter_map(|row| {
                let database: String = row.try_get("database").ok()?;
                Some(database.into())
            })
            .collect(),
        Err(err) => {
            tracing::error!(
                "Failed to complete database name for prefix '{}' and user '{}': {:?}",
                database_prefix,
                unix_user.username,
                err
            );
            vec![]
        }
    }
}

pub async fn create_databases(
    database_names: Vec<MySQLDatabase>,
    unix_user: &UnixUser,
    connection: &mut MySqlConnection,
    _db_is_mariadb: bool,
) -> CreateDatabasesResponse {
    let mut results = BTreeMap::new();

    for database_name in database_names {
        if let Err(err) = validate_name(&database_name) {
            results.insert(
                database_name.to_owned(),
                Err(CreateDatabaseError::SanitizationError(err)),
            );
            continue;
        }

        if let Err(err) = validate_ownership_by_unix_user(&database_name, unix_user) {
            results.insert(
                database_name.to_owned(),
                Err(CreateDatabaseError::OwnershipError(err)),
            );
            continue;
        }

        match unsafe_database_exists(&database_name, &mut *connection).await {
            Ok(true) => {
                results.insert(
                    database_name.to_owned(),
                    Err(CreateDatabaseError::DatabaseAlreadyExists),
                );
                continue;
            }
            Err(err) => {
                results.insert(
                    database_name.to_owned(),
                    Err(CreateDatabaseError::MySqlError(err.to_string())),
                );
                continue;
            }
            _ => {}
        }

        let result =
            sqlx::query(format!("CREATE DATABASE {}", quote_identifier(&database_name)).as_str())
                .execute(&mut *connection)
                .await
                .map(|_| ())
                .map_err(|err| CreateDatabaseError::MySqlError(err.to_string()));

        if let Err(err) = &result {
            tracing::error!("Failed to create database '{}': {:?}", &database_name, err);
        }

        results.insert(database_name, result);
    }

    results
}

pub async fn drop_databases(
    database_names: Vec<MySQLDatabase>,
    unix_user: &UnixUser,
    connection: &mut MySqlConnection,
    _db_is_mariadb: bool,
) -> DropDatabasesResponse {
    let mut results = BTreeMap::new();

    for database_name in database_names {
        if let Err(err) = validate_name(&database_name) {
            results.insert(
                database_name.to_owned(),
                Err(DropDatabaseError::SanitizationError(err)),
            );
            continue;
        }

        if let Err(err) = validate_ownership_by_unix_user(&database_name, unix_user) {
            results.insert(
                database_name.to_owned(),
                Err(DropDatabaseError::OwnershipError(err)),
            );
            continue;
        }

        match unsafe_database_exists(&database_name, &mut *connection).await {
            Ok(false) => {
                results.insert(
                    database_name.to_owned(),
                    Err(DropDatabaseError::DatabaseDoesNotExist),
                );
                continue;
            }
            Err(err) => {
                results.insert(
                    database_name.to_owned(),
                    Err(DropDatabaseError::MySqlError(err.to_string())),
                );
                continue;
            }
            _ => {}
        }

        let result =
            sqlx::query(format!("DROP DATABASE {}", quote_identifier(&database_name)).as_str())
                .execute(&mut *connection)
                .await
                .map(|_| ())
                .map_err(|err| DropDatabaseError::MySqlError(err.to_string()));

        if let Err(err) = &result {
            tracing::error!("Failed to drop database '{}': {:?}", &database_name, err);
        }

        results.insert(database_name, result);
    }

    results
}

#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
pub struct DatabaseRow {
    pub database: MySQLDatabase,
}

impl FromRow<'_, sqlx::mysql::MySqlRow> for DatabaseRow {
    fn from_row(row: &sqlx::mysql::MySqlRow) -> Result<Self, sqlx::Error> {
        Ok(DatabaseRow {
            database: row.try_get::<String, _>("database")?.into(),
        })
    }
}

pub async fn list_databases(
    database_names: Vec<MySQLDatabase>,
    unix_user: &UnixUser,
    connection: &mut MySqlConnection,
    _db_is_mariadb: bool,
) -> ListDatabasesResponse {
    let mut results = BTreeMap::new();

    for database_name in database_names {
        if let Err(err) = validate_name(&database_name) {
            results.insert(
                database_name.to_owned(),
                Err(ListDatabasesError::SanitizationError(err)),
            );
            continue;
        }

        if let Err(err) = validate_ownership_by_unix_user(&database_name, unix_user) {
            results.insert(
                database_name.to_owned(),
                Err(ListDatabasesError::OwnershipError(err)),
            );
            continue;
        }

        let result = sqlx::query_as::<_, DatabaseRow>(
            r#"
          SELECT CAST(`SCHEMA_NAME` AS CHAR(64)) AS `database`
          FROM `information_schema`.`SCHEMATA`
          WHERE `SCHEMA_NAME` = ?
        "#,
        )
        .bind(database_name.to_string())
        .fetch_optional(&mut *connection)
        .await
        .map_err(|err| ListDatabasesError::MySqlError(err.to_string()))
        .and_then(|database| {
            database
                .map(Ok)
                .unwrap_or_else(|| Err(ListDatabasesError::DatabaseDoesNotExist))
        });

        if let Err(err) = &result {
            tracing::error!("Failed to list database '{}': {:?}", &database_name, err);
        }

        results.insert(database_name, result);
    }

    results
}

pub async fn list_all_databases_for_user(
    unix_user: &UnixUser,
    connection: &mut MySqlConnection,
    _db_is_mariadb: bool,
) -> ListAllDatabasesResponse {
    let result = sqlx::query_as::<_, DatabaseRow>(
        r#"
          SELECT CAST(`SCHEMA_NAME` AS CHAR(64)) AS `database`
          FROM `information_schema`.`SCHEMATA`
          WHERE `SCHEMA_NAME` NOT IN ('information_schema', 'performance_schema', 'mysql', 'sys')
            AND `SCHEMA_NAME` REGEXP ?
        "#,
    )
    .bind(create_user_group_matching_regex(unix_user))
    .fetch_all(connection)
    .await
    .map_err(|err| ListAllDatabasesError::MySqlError(err.to_string()));

    if let Err(err) = &result {
        tracing::error!(
            "Failed to list databases for user '{}': {:?}",
            unix_user.username,
            err
        );
    }

    result
}