133 lines
3.3 KiB
Go
133 lines
3.3 KiB
Go
package v1
|
|
|
|
import (
|
|
"errors"
|
|
"go-cook/api/domain"
|
|
"go-cook/api/repositories"
|
|
"log"
|
|
"net/http"
|
|
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/labstack/echo/v4"
|
|
)
|
|
|
|
const (
|
|
ErrJwtMissing = "auth token is missing"
|
|
ErrJwtClaimsMissing = "claims missing on token"
|
|
ErrJwtExpired = "auth token has expired"
|
|
ErrJwtScopeMissing = "required scope is missing"
|
|
ErrUserNotFound = "requested user does not exist"
|
|
ErrUsernameAlreadyExists = "the requested username already exists"
|
|
)
|
|
|
|
func (h *Handler) AuthRegister(c echo.Context) error {
|
|
username := c.FormValue("username")
|
|
password := c.FormValue("password")
|
|
|
|
//username := c.QueryParam("username")
|
|
exists, err := h.userRepo.GetByName(username)
|
|
if err != nil {
|
|
// if we have an err, validate that if its not user not found.
|
|
// if the user is not found, we can use that name
|
|
if err.Error() != repositories.ErrUserNotFound {
|
|
return c.JSON(http.StatusInternalServerError, domain.ErrorResponse{
|
|
HttpCode: http.StatusInternalServerError,
|
|
Message: err.Error(),
|
|
})
|
|
}
|
|
}
|
|
if exists.Name == username {
|
|
return h.InternalServerErrorResponse(c, ErrUsernameAlreadyExists)
|
|
}
|
|
|
|
//password := c.QueryParam("password")
|
|
err = h.UserService.CheckPasswordForRequirements(password)
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, domain.ErrorResponse{
|
|
HttpCode: http.StatusInternalServerError,
|
|
Message: err.Error(),
|
|
})
|
|
}
|
|
|
|
_, err = h.userRepo.Create(username, password, domain.ScopeRecipeRead)
|
|
if err != nil {
|
|
return c.JSON(http.StatusInternalServerError, domain.ErrorResponse{
|
|
HttpCode: http.StatusInternalServerError,
|
|
Message: err.Error(),
|
|
})
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (h *Handler) AuthLogin(c echo.Context) error {
|
|
formValues, err := c.FormParams()
|
|
if err != nil {
|
|
h.InternalServerErrorResponse(c, err.Error())
|
|
}
|
|
log.Println(formValues)
|
|
username := formValues.Get("name")
|
|
password := formValues.Get("password")
|
|
|
|
// Check to see if they are trying to login with the admin token
|
|
if username == "" {
|
|
return h.validateAdminToken(c, password)
|
|
}
|
|
|
|
// check if the user exists
|
|
err = h.UserService.DoesUserExist(username)
|
|
if err != nil {
|
|
return h.InternalServerErrorResponse(c, err.Error())
|
|
}
|
|
|
|
// make sure the hash matches
|
|
err = h.UserService.DoesPasswordMatchHash(username, password)
|
|
if err != nil {
|
|
return h.InternalServerErrorResponse(c, err.Error())
|
|
}
|
|
|
|
token, err := h.generateJwt(username)
|
|
if err != nil {
|
|
return h.InternalServerErrorResponse(c, err.Error())
|
|
}
|
|
|
|
return c.JSON(http.StatusOK, token)
|
|
}
|
|
|
|
func (h *Handler) validateAdminToken(c echo.Context, password string) error {
|
|
if h.Config.AdminToken != password {
|
|
return h.ReturnUnauthorizedResponse(c, ErrUserNotFound)
|
|
}
|
|
|
|
token, err := h.generateAdminJwt("admin")
|
|
if err != nil {
|
|
return h.InternalServerErrorResponse(c, err.Error())
|
|
}
|
|
|
|
return c.JSON(http.StatusOK, token)
|
|
}
|
|
|
|
//func (h *Handler) AddScope(c echo.Context) error {
|
|
//
|
|
//}
|
|
|
|
func (h *Handler) RefreshJwtToken(c echo.Context) error {
|
|
return nil
|
|
}
|
|
|
|
func (h *Handler) getJwtToken(c echo.Context) (JwtToken, error) {
|
|
// Make sure that the request came with a jwtToken
|
|
token, ok := c.Get("user").(*jwt.Token)
|
|
if !ok {
|
|
return JwtToken{}, errors.New(ErrJwtMissing)
|
|
}
|
|
|
|
// Generate the claims from the token
|
|
claims, ok := token.Claims.(*JwtToken)
|
|
if !ok {
|
|
return JwtToken{}, errors.New(ErrJwtClaimsMissing)
|
|
}
|
|
|
|
return *claims, nil
|
|
}
|