100 lines
2.4 KiB
Go
100 lines
2.4 KiB
Go
package v1
|
|
|
|
import (
|
|
"go-cook/api/models"
|
|
"go-cook/api/repositories"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/labstack/echo/v4"
|
|
)
|
|
|
|
type JwtToken struct {
|
|
Exp time.Time `json:"exp"`
|
|
Authorized bool `json:"authorized"`
|
|
UserName string `json:"username"`
|
|
Token string `json:"token"`
|
|
jwt.RegisteredClaims
|
|
}
|
|
|
|
func generateJwt() (string, error) {
|
|
//TODO use env here
|
|
secret := []byte("ThisIsABadSecretDontReallyUseThis")
|
|
|
|
token := jwt.New(jwt.SigningMethodHS256)
|
|
claims := token.Claims.(jwt.MapClaims)
|
|
claims["exp"] = time.Now().Add(10 * time.Minute)
|
|
claims["authorized"] = true
|
|
claims["username"] = "someone"
|
|
|
|
tokenString, err := token.SignedString(secret)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
return tokenString, nil
|
|
}
|
|
|
|
func (h *Handler) AuthRegister(c echo.Context) error {
|
|
username := c.QueryParam("username")
|
|
_, err := h.userRepo.GetByName(username)
|
|
if err != nil {
|
|
// if we have an err, validate that if its not user not found.
|
|
// if the user is not found, we can use that name
|
|
if err.Error() != repositories.ErrUserNotFound {
|
|
return c.JSON(http.StatusInternalServerError, models.ErrorResponse{
|
|
HttpCode: http.StatusInternalServerError,
|
|
Message: err.Error(),
|
|
})
|
|
}
|
|
}
|
|
|
|
password := c.QueryParam("password")
|
|
err = h.UserService.CheckPasswordForRequirements(password)
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, models.ErrorResponse{
|
|
HttpCode: http.StatusInternalServerError,
|
|
Message: err.Error(),
|
|
})
|
|
}
|
|
|
|
_, err = h.userRepo.Create(username, password)
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, models.ErrorResponse{
|
|
HttpCode: http.StatusInternalServerError,
|
|
Message: err.Error(),
|
|
})
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (h *Handler) AuthLogin(c echo.Context) error {
|
|
username := c.QueryParam("username")
|
|
password := c.QueryParam("password")
|
|
|
|
// check if the user exists
|
|
err := h.UserService.DoesUserExist(username)
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, err)
|
|
}
|
|
|
|
// make sure the hash matches
|
|
err = h.UserService.DoesPasswordMatchHash(username, password)
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, err)
|
|
}
|
|
|
|
token, err := generateJwt()
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, err)
|
|
}
|
|
|
|
return c.JSON(http.StatusOK, token)
|
|
}
|
|
|
|
func (h *Handler) RefreshJwtToken(c echo.Context) error {
|
|
return nil
|
|
}
|