Update DB queries in oauth/profile view due to PAT model change

views.go

@@ -162,45 +162,79 @@ func ServiceValidate(c echo.Context) error {
 }
 
 func OAuth(c echo.Context) error {
-	var (
-		scopes string
-		result User
-	)
 
 	tokenId := strings.Replace(c.Request().Header.Get("Authorization"), "Bearer ", "", 1)
 
-	var queryString = `
+	// Find the user that owns the token
+	var result User
+	queryString := `
 		SELECT DISTINCT
 			osf_guid._id,
 			osf_osfuser.username,
 			osf_osfuser.given_name,
-			osf_osfuser.family_name,
-			osf_apioauth2personaltoken.scopes
+			osf_osfuser.family_name
 		FROM osf_guid
 			LEFT JOIN django_content_type
 				ON django_content_type.model = 'osfuser'
 			JOIN osf_osfuser
 				ON django_content_type.id = osf_guid.content_type_id AND object_id = osf_osfuser.id
 			JOIN osf_apioauth2personaltoken
-					ON osf_osfuser.id = osf_apioauth2personaltoken.owner_id
-			WHERE osf_apioauth2personaltoken.token_id = $1
+				ON osf_osfuser.id = osf_apioauth2personaltoken.owner_id
+		WHERE osf_apioauth2personaltoken.token_id = $1
+	`
+	err := DatabaseConnection.QueryRow(queryString, tokenId).Scan(&result.Id, &result.Username, &result.GivenName, &result.FamilyName)
+	if err != nil {
+		if err != sql.ErrNoRows {
+			panic(err)
+		}
+		fmt.Printf("Access token %s not found\n", tokenId)
+		return c.NoContent(http.StatusNotFound)
+	}
+	fmt.Printf("User found for token: username = %s , guid =%s\n", result.Username, result.Id)
+
+	// Find all the scopes associated with the token
+	fmt.Printf("Reading scopes ... ")
+	queryString = `
+		SELECT DISTINCT osf_apioauth2scope.name
+		FROM osf_apioauth2personaltoken_scopes
+			JOIN osf_apioauth2personaltoken
+		   		on osf_apioauth2personaltoken_scopes.apioauth2personaltoken_id = osf_apioauth2personaltoken.id
+			JOIN osf_apioauth2scope
+		   		on osf_apioauth2personaltoken_scopes.apioauth2scope_id = osf_apioauth2scope.id
+		WHERE osf_apioauth2personaltoken.token_id = $1
 	`
-	err := DatabaseConnection.QueryRow(queryString, tokenId).Scan(&result.Id, &result.Username, &result.GivenName, &result.FamilyName, &scopes)
+	rows, err := DatabaseConnection.Query(queryString, tokenId)
 	if err != nil {
 		if err != sql.ErrNoRows {
 			panic(err)
 		}
-		fmt.Println("Access token", tokenId, "not found")
+		fmt.Printf("No scope is found for access token %s\n", tokenId)
 		return c.NoContent(http.StatusNotFound)
 	}
-	fmt.Println("User found for token: username =", result.Username, ", guid =", result.Id)
+	defer rows.Close()
+	scopes := make([]string, 0)
+	var scope string
+	for rows.Next() {
+		err = rows.Scan(&scope)
+		if err != nil {
+			panic(err)
+		}
+		fmt.Printf("%s, ", scope)
+		scopes = append(scopes, scope)
+	}
+	err = rows.Err()
+	if err != nil {
+		panic(err)
+	}
+	fmt.Printf("... %d scopes in total.\n", len(scopes))
 
+	// Return 200 with user information and scopes
 	return c.JSON(200, OAuthResponse{
 		Id: result.Id,
 		Attributes: OAuthAttributes{
 			LastName:  result.FamilyName,
 			FirstName: result.GivenName,
 		},
-		Scope: strings.Split(scopes, " "),
+		Scope: scopes,
 	})
 }