Enforce security to checkin api

Signed-off-by: Asai Neko <sugar@sne.moe>

api/event/checkin.go

@@ -25,8 +25,34 @@ import (
 //	@Security		ApiKeyAuth
 //	@Router			/event/checkin [get]
 func (self *EventHandler) Checkin(c *gin.Context) {
-	userIdOrig, _ := c.Get("user_id")
+	userIdOrig, ok := c.Get("user_id")
-	userId, _ := uuid.Parse(userIdOrig.(string))
+	if !ok {
+		errorCode := new(exception.Builder).
+			SetStatus(exception.StatusUser).
+			SetService(exception.ServiceUser).
+			SetEndpoint(exception.EndpointUserServiceInfo).
+			SetType(exception.TypeCommon).
+			SetOriginal(exception.CommonErrorMissingUserId).
+			Throw(c).
+			String()
+		utils.HttpResponse(c, 403, errorCode)
+		return
+	}
+
+	userId, err := uuid.Parse(userIdOrig.(string))
+	if err != nil {
+		errorCode := new(exception.Builder).
+			SetStatus(exception.StatusServer).
+			SetService(exception.ServiceUser).
+			SetEndpoint(exception.EndpointUserServiceInfo).
+			SetType(exception.TypeCommon).
+			SetOriginal(exception.CommonErrorUuidParseFailed).
+			SetError(err).
+			Throw(c).
+			String()
+		utils.HttpResponse(c, 500, errorCode)
+		return
+	}
 
 	eventIdOrig := c.Query("event_id")
 	eventId, err := uuid.Parse(eventIdOrig)
@@ -99,8 +125,34 @@ func (self *EventHandler) CheckinSubmit(c *gin.Context) {
 //	@Security		ApiKeyAuth
 //	@Router			/event/checkin/query [get]
 func (self *EventHandler) CheckinQuery(c *gin.Context) {
-	userIdOrig, _ := c.Get("user_id")
+	userIdOrig, ok := c.Get("user_id")
-	userId, _ := uuid.Parse(userIdOrig.(string))
+	if !ok {
+		errorCode := new(exception.Builder).
+			SetStatus(exception.StatusUser).
+			SetService(exception.ServiceUser).
+			SetEndpoint(exception.EndpointUserServiceInfo).
+			SetType(exception.TypeCommon).
+			SetOriginal(exception.CommonErrorMissingUserId).
+			Throw(c).
+			String()
+		utils.HttpResponse(c, 403, errorCode)
+		return
+	}
+
+	userId, err := uuid.Parse(userIdOrig.(string))
+	if err != nil {
+		errorCode := new(exception.Builder).
+			SetStatus(exception.StatusServer).
+			SetService(exception.ServiceUser).
+			SetEndpoint(exception.EndpointUserServiceInfo).
+			SetType(exception.TypeCommon).
+			SetOriginal(exception.CommonErrorUuidParseFailed).
+			SetError(err).
+			Throw(c).
+			String()
+		utils.HttpResponse(c, 500, errorCode)
+		return
+	}
 
 	eventIdOrig := c.Query("event_id")
 	eventId, err := uuid.Parse(eventIdOrig)