added new endpoint to save product descriptions

app/service/productDescriptionService/productDescriptionService.go

@@ -1,10 +1,15 @@
 package productDescriptionService
 
 import (
+	"encoding/xml"
 	"fmt"
+	"io"
+	"slices"
+	"strings"
 
 	"git.ma-al.com/goc_daniel/b2b/app/db"
 	"git.ma-al.com/goc_daniel/b2b/app/model"
+	"git.ma-al.com/goc_daniel/b2b/app/utils/responseErrors"
 	"gorm.io/gorm"
 )
 
@@ -18,12 +23,29 @@ func New() *ProductDescriptionService {
 	}
 }
 
+func isValidXHTML(s string) bool {
+	decoder := xml.NewDecoder(strings.NewReader(s))
+	hasStartTag := false
+
+	for {
+		tok, err := decoder.Token()
+		if err != nil {
+			if err == io.EOF {
+				return hasStartTag
+			}
+			return false
+		}
+
+		if _, ok := tok.(xml.StartElement); ok {
+			hasStartTag = true
+		}
+	}
+}
+
 // We assume that any user has access to all product descriptions
 func (s *ProductDescriptionService) GetProductDescription(userID uint, productID uint, productShopID uint, productLangID uint) (*model.ProductDescription, error) {
 	var ProductDescription model.ProductDescription
 
-	fmt.Println(userID, productID, productShopID, productLangID)
-
 	err := s.db.
 		Table("ps_product_lang").
 		Where("id_product = ? AND id_shop = ? AND id_lang = ?", productID, productShopID, productLangID).
@@ -35,6 +57,59 @@ func (s *ProductDescriptionService) GetProductDescription(userID uint, productID
 	return &ProductDescription, nil
 }
 
+// Updates relevant fields with the "updates" map
+func (s *ProductDescriptionService) SaveProductDescription(userID uint, productID uint, productShopID uint, productLangID uint, updates map[string]string) error {
+	// only some fields can be affected
+	allowedFields := []string{"description", "description_short", "meta_description", "meta_title", "name", "available_now", "available_later", "usage"}
+	for key := range updates {
+		if !slices.Contains(allowedFields, key) {
+			return responseErrors.ErrBadField
+		}
+	}
+
+	// check that fields description, description_short and usage, if they exist, have a valid html format
+	mustBeHTML := []string{"description", "description_short", "usage"}
+	for i := 0; i < len(mustBeHTML); i++ {
+		if text, exists := updates[mustBeHTML[i]]; exists {
+			if !isValidXHTML(text) {
+				return responseErrors.ErrInvalidHTML
+			}
+		}
+	}
+
+	record := model.ProductDescription{
+		ProductID: productID,
+		ShopID:    productShopID,
+		LangID:    productLangID,
+	}
+
+	err := s.db.
+		Table("ps_product_lang").
+		Where("id_product = ? AND id_shop = ? AND id_lang = ?", productID, productShopID, productLangID).
+		FirstOrCreate(&record).Error
+	if err != nil {
+		return fmt.Errorf("database error: %w", err)
+	}
+
+	if len(updates) == 0 {
+		return nil
+	}
+	updatesIface := make(map[string]interface{}, len(updates))
+	for k, v := range updates {
+		updatesIface[k] = v
+	}
+
+	err = s.db.
+		Table("ps_product_lang").
+		Where("id_product = ? AND id_shop = ? AND id_lang = ?", productID, productShopID, productLangID).
+		Updates(updatesIface).Error
+	if err != nil {
+		return fmt.Errorf("database error: %w", err)
+	}
+
+	return nil
+}
+
 // func (s *ProductDescriptionService) GetRepositoriesForUser(userID uint) ([]uint, error) {
 // 	var repoIDs []uint