terdut-server/internal/api/alerts.go

package api

import (
	"database/sql"
	"encoding/json"
	"fmt"
	"net/http"
	"strconv"
	"strings"
	"time"

	"github.com/go-chi/chi/v5"
	"github.com/yeniklas/terdut-server/internal/models"
)

func handleListAlerts(db *sql.DB) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		q := r.URL.Query()

		where := []string{}
		args := []any{}

		if status := q.Get("status"); status != "" {
			where = append(where, "status = ?")
			args = append(args, status)
		}
		if name := q.Get("name"); name != "" {
			where = append(where, "name = ?")
			args = append(args, name)
		}
		if from := q.Get("from"); from != "" {
			if t, err := time.Parse("2006-01-02", from); err == nil {
				where = append(where, "received_at >= ?")
				args = append(args, t.UTC().Unix())
			}
		}
		if to := q.Get("to"); to != "" {
			if t, err := time.Parse("2006-01-02", to); err == nil {
				// include the full to-day
				where = append(where, "received_at < ?")
				args = append(args, t.UTC().AddDate(0, 0, 1).Unix())
			}
		}

		limit := 50
		if l := q.Get("limit"); l != "" {
			if n, err := strconv.Atoi(l); err == nil && n > 0 && n <= 500 {
				limit = n
			}
		}

		clause := "1=1"
		if len(where) > 0 {
			clause = strings.Join(where, " AND ")
		}
		args = append(args, limit)

		rows, err := db.QueryContext(r.Context(), fmt.Sprintf(`
			SELECT id, fingerprint, name, status, labels, annotations,
			       starts_at, ends_at, generator_url, received_at
			FROM   alerts
			WHERE  %s
			ORDER  BY received_at DESC
			LIMIT  ?`, clause), args...)
		if err != nil {
			respond(w, http.StatusInternalServerError, errResp("internal error"))
			return
		}
		defer rows.Close()

		alerts := []models.Alert{}
		for rows.Next() {
			a, err := scanAlert(rows)
			if err != nil {
				respond(w, http.StatusInternalServerError, errResp("internal error"))
				return
			}
			alerts = append(alerts, a)
		}
		respond(w, http.StatusOK, alerts)
	}
}

func handleGetAlert(db *sql.DB) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		id, err := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
		if err != nil {
			respond(w, http.StatusBadRequest, errResp("invalid alert id"))
			return
		}
		row := db.QueryRowContext(r.Context(), `
			SELECT id, fingerprint, name, status, labels, annotations,
			       starts_at, ends_at, generator_url, received_at
			FROM   alerts WHERE id = ?`, id)
		a, err := scanAlert(row)
		if err == sql.ErrNoRows {
			respond(w, http.StatusNotFound, errResp("alert not found"))
			return
		}
		if err != nil {
			respond(w, http.StatusInternalServerError, errResp("internal error"))
			return
		}
		respond(w, http.StatusOK, a)
	}
}

// scanner is satisfied by both *sql.Row and *sql.Rows.
type scanner interface {
	Scan(dest ...any) error
}

func scanAlert(s scanner) (models.Alert, error) {
	var a models.Alert
	var labelsJSON, annotationsJSON string
	var startsAtUnix, receivedAtUnix int64
	var endsAtUnix *int64

	if err := s.Scan(
		&a.ID, &a.Fingerprint, &a.Name, &a.Status,
		&labelsJSON, &annotationsJSON,
		&startsAtUnix, &endsAtUnix,
		&a.GeneratorURL, &receivedAtUnix,
	); err != nil {
		return a, err
	}

	json.Unmarshal([]byte(labelsJSON), &a.Labels)         //nolint:errcheck
	json.Unmarshal([]byte(annotationsJSON), &a.Annotations) //nolint:errcheck
	a.StartsAt = time.Unix(startsAtUnix, 0).UTC()
	a.ReceivedAt = time.Unix(receivedAtUnix, 0).UTC()
	if endsAtUnix != nil {
		t := time.Unix(*endsAtUnix, 0).UTC()
		a.EndsAt = &t
	}
	return a, nil
}