Add multi-user support with export feature

- New users table (migration 004) with user_id on exercises, training_sets, sessions
- User CRUD endpoints (GET/POST /api/v1/users, DELETE /api/v1/users/{id})
- All existing endpoints scoped to X-User-ID header
- CSV export endpoint (GET /api/v1/export) for completed sessions
- UserGate in PageShell: blocks app until a user is selected
- Settings page for managing users (create, switch, delete)
- BottomNav/Sidebar updated with settings navigation
- Fix: nil pointer panic in handleDeleteUser on success path
- Fix: export download now uses fetch with X-User-ID header instead of window.location.href

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Christoph K.
2026-03-21 23:55:51 +01:00
parent bff85908c3
commit a954f2c59d
24 changed files with 793 additions and 95 deletions

View File

@@ -6,16 +6,17 @@ import (
"krafttrainer/internal/model"
)
// ListExercises gibt alle nicht-gelöschten Übungen zurück, optional gefiltert.
func (s *Store) ListExercises(muscleGroup, query string) ([]model.Exercise, error) {
// ListExercises gibt alle nicht-gelöschten Übungen eines Nutzers zurück, optional gefiltert.
func (s *Store) ListExercises(userID int64, muscleGroup, query string) ([]model.Exercise, error) {
rows, err := s.db.Query(`
SELECT id, name, description, muscle_group, weight_step_kg, created_at, updated_at
FROM exercises
WHERE deleted_at IS NULL
AND user_id = ?
AND (muscle_group = ? OR ? = '')
AND (name LIKE '%' || ? || '%' OR ? = '')
ORDER BY name`,
muscleGroup, muscleGroup, query, query,
userID, muscleGroup, muscleGroup, query, query,
)
if err != nil {
return nil, fmt.Errorf("Übungen abfragen: %w", err)
@@ -36,7 +37,7 @@ func (s *Store) ListExercises(muscleGroup, query string) ([]model.Exercise, erro
return exercises, rows.Err()
}
// GetExercise gibt eine einzelne Übung zurück.
// GetExercise gibt eine einzelne Übung zurück (intern, ohne User-Scope).
func (s *Store) GetExercise(id int64) (*model.Exercise, error) {
var e model.Exercise
err := s.db.QueryRow(`
@@ -53,11 +54,11 @@ func (s *Store) GetExercise(id int64) (*model.Exercise, error) {
}
// CreateExercise legt eine neue Übung an und gibt sie zurück.
func (s *Store) CreateExercise(req *model.CreateExerciseRequest) (*model.Exercise, error) {
func (s *Store) CreateExercise(userID int64, req *model.CreateExerciseRequest) (*model.Exercise, error) {
result, err := s.db.Exec(`
INSERT INTO exercises (name, description, muscle_group, weight_step_kg)
VALUES (?, ?, ?, ?)`,
req.Name, req.Description, req.MuscleGroup, *req.WeightStepKg,
INSERT INTO exercises (name, description, muscle_group, weight_step_kg, user_id)
VALUES (?, ?, ?, ?, ?)`,
req.Name, req.Description, req.MuscleGroup, *req.WeightStepKg, userID,
)
if err != nil {
return nil, fmt.Errorf("Übung erstellen: %w", err)
@@ -67,14 +68,14 @@ func (s *Store) CreateExercise(req *model.CreateExerciseRequest) (*model.Exercis
return s.GetExercise(id)
}
// UpdateExercise aktualisiert eine Übung und gibt sie zurück.
func (s *Store) UpdateExercise(id int64, req *model.CreateExerciseRequest) (*model.Exercise, error) {
// UpdateExercise aktualisiert eine Übung eines Nutzers und gibt sie zurück.
func (s *Store) UpdateExercise(id, userID int64, req *model.CreateExerciseRequest) (*model.Exercise, error) {
result, err := s.db.Exec(`
UPDATE exercises
SET name = ?, description = ?, muscle_group = ?, weight_step_kg = ?,
updated_at = CURRENT_TIMESTAMP
WHERE id = ? AND deleted_at IS NULL`,
req.Name, req.Description, req.MuscleGroup, *req.WeightStepKg, id,
WHERE id = ? AND user_id = ? AND deleted_at IS NULL`,
req.Name, req.Description, req.MuscleGroup, *req.WeightStepKg, id, userID,
)
if err != nil {
return nil, fmt.Errorf("Übung aktualisieren: %w", err)
@@ -87,11 +88,11 @@ func (s *Store) UpdateExercise(id int64, req *model.CreateExerciseRequest) (*mod
return s.GetExercise(id)
}
// SoftDeleteExercise markiert eine Übung als gelöscht.
func (s *Store) SoftDeleteExercise(id int64) error {
// SoftDeleteExercise markiert eine Übung eines Nutzers als gelöscht.
func (s *Store) SoftDeleteExercise(id, userID int64) error {
result, err := s.db.Exec(`
UPDATE exercises SET deleted_at = CURRENT_TIMESTAMP, updated_at = CURRENT_TIMESTAMP
WHERE id = ? AND deleted_at IS NULL`, id,
WHERE id = ? AND user_id = ? AND deleted_at IS NULL`, id, userID,
)
if err != nil {
return fmt.Errorf("Übung löschen: %w", err)