276 lines
8.0 KiB
Go
276 lines
8.0 KiB
Go
package user
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"errors"
|
|
"net/http"
|
|
"strconv"
|
|
"time"
|
|
|
|
"connectrpc.com/connect"
|
|
"github.com/golang-jwt/jwt/v5"
|
|
userv1 "github.com/spotdemo4/trevstack/server/internal/connect/user/v1"
|
|
"github.com/spotdemo4/trevstack/server/internal/connect/user/v1/userv1connect"
|
|
"github.com/spotdemo4/trevstack/server/internal/interceptors"
|
|
"github.com/spotdemo4/trevstack/server/internal/sqlc"
|
|
"github.com/spotdemo4/trevstack/server/internal/util"
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
func userToConnect(item sqlc.User) *userv1.User {
|
|
return &userv1.User{
|
|
Id: item.ID,
|
|
Username: item.Username,
|
|
ProfilePictureId: item.ProfilePictureID,
|
|
}
|
|
}
|
|
|
|
type Handler struct {
|
|
db *sqlc.Queries
|
|
key []byte
|
|
}
|
|
|
|
func (h *Handler) GetUser(ctx context.Context, _ *connect.Request[userv1.GetUserRequest]) (*connect.Response[userv1.GetUserResponse], error) {
|
|
userid, ok := interceptors.GetUserContext(ctx)
|
|
if !ok {
|
|
return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("unauthenticated"))
|
|
}
|
|
|
|
// Get user
|
|
user, err := h.db.GetUser(ctx, userid)
|
|
if err != nil {
|
|
if errors.Is(err, sql.ErrNoRows) {
|
|
return nil, connect.NewError(connect.CodeNotFound, err)
|
|
}
|
|
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
res := connect.NewResponse(&userv1.GetUserResponse{
|
|
User: userToConnect(user),
|
|
})
|
|
return res, nil
|
|
}
|
|
|
|
func (h *Handler) UpdatePassword(ctx context.Context, req *connect.Request[userv1.UpdatePasswordRequest]) (*connect.Response[userv1.UpdatePasswordResponse], error) {
|
|
userid, ok := interceptors.GetUserContext(ctx)
|
|
if !ok {
|
|
return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("unauthenticated"))
|
|
}
|
|
|
|
// Get user
|
|
user, err := h.db.GetUser(ctx, userid)
|
|
if err != nil {
|
|
if errors.Is(err, sql.ErrNoRows) {
|
|
return nil, connect.NewError(connect.CodeNotFound, err)
|
|
}
|
|
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
// Validate
|
|
if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(req.Msg.OldPassword)); err != nil {
|
|
return nil, connect.NewError(connect.CodePermissionDenied, errors.New("invalid password"))
|
|
}
|
|
if req.Msg.NewPassword != req.Msg.ConfirmPassword {
|
|
return nil, connect.NewError(connect.CodeInvalidArgument, errors.New("passwords do not match"))
|
|
}
|
|
|
|
// Hash password
|
|
hash, err := bcrypt.GenerateFromPassword([]byte(req.Msg.NewPassword), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
// Update password
|
|
err = h.db.UpdateUser(ctx, sqlc.UpdateUserParams{
|
|
Password: util.ToPointer(string(hash)),
|
|
ID: userid,
|
|
})
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
res := connect.NewResponse(&userv1.UpdatePasswordResponse{})
|
|
return res, nil
|
|
}
|
|
|
|
func (h *Handler) GetAPIKey(ctx context.Context, req *connect.Request[userv1.GetAPIKeyRequest]) (*connect.Response[userv1.GetAPIKeyResponse], error) {
|
|
userid, ok := interceptors.GetUserContext(ctx)
|
|
if !ok {
|
|
return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("unauthenticated"))
|
|
}
|
|
|
|
// Get user
|
|
user, err := h.db.GetUser(ctx, userid)
|
|
if err != nil {
|
|
if errors.Is(err, sql.ErrNoRows) {
|
|
return nil, connect.NewError(connect.CodeNotFound, err)
|
|
}
|
|
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
// Validate
|
|
if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(req.Msg.Password)); err != nil {
|
|
return nil, connect.NewError(connect.CodePermissionDenied, errors.New("invalid username or password"))
|
|
}
|
|
if req.Msg.Password != req.Msg.ConfirmPassword {
|
|
return nil, connect.NewError(connect.CodeInvalidArgument, errors.New("passwords do not match"))
|
|
}
|
|
|
|
// Generate JWT
|
|
t := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.RegisteredClaims{
|
|
Issuer: "trevstack",
|
|
Subject: strconv.FormatInt(user.ID, 10),
|
|
IssuedAt: &jwt.NumericDate{
|
|
Time: time.Now(),
|
|
},
|
|
})
|
|
ss, err := t.SignedString(h.key)
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
res := connect.NewResponse(&userv1.GetAPIKeyResponse{
|
|
Key: ss,
|
|
})
|
|
return res, nil
|
|
}
|
|
|
|
func (h *Handler) UpdateProfilePicture(ctx context.Context, req *connect.Request[userv1.UpdateProfilePictureRequest]) (*connect.Response[userv1.UpdateProfilePictureResponse], error) {
|
|
userid, ok := interceptors.GetUserContext(ctx)
|
|
if !ok {
|
|
return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("unauthenticated"))
|
|
}
|
|
|
|
// Validate file
|
|
fileType := http.DetectContentType(req.Msg.Data)
|
|
if fileType != "image/jpeg" && fileType != "image/png" {
|
|
return nil, connect.NewError(connect.CodeInvalidArgument, errors.New("invalid file type"))
|
|
}
|
|
|
|
// Save bytes into file
|
|
fileID, err := h.db.InsertFile(ctx, sqlc.InsertFileParams{
|
|
Name: req.Msg.FileName,
|
|
Data: req.Msg.Data,
|
|
UserID: userid,
|
|
})
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
// Get user
|
|
user, err := h.db.GetUser(ctx, userid)
|
|
if err != nil {
|
|
if errors.Is(err, sql.ErrNoRows) {
|
|
return nil, connect.NewError(connect.CodeNotFound, err)
|
|
}
|
|
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
// Update user profile picture
|
|
err = h.db.UpdateUser(ctx, sqlc.UpdateUserParams{
|
|
// set
|
|
ProfilePictureID: &fileID,
|
|
|
|
// where
|
|
ID: userid,
|
|
})
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
|
|
// Delete old profile picture if exists
|
|
if user.ProfilePictureID != nil {
|
|
err = h.db.DeleteFile(ctx, sqlc.DeleteFileParams{
|
|
ID: *user.ProfilePictureID,
|
|
UserID: userid,
|
|
})
|
|
if err != nil {
|
|
return nil, connect.NewError(connect.CodeInternal, err)
|
|
}
|
|
}
|
|
|
|
res := connect.NewResponse(&userv1.UpdateProfilePictureResponse{
|
|
User: userToConnect(user),
|
|
})
|
|
return res, nil
|
|
}
|
|
|
|
// func (h *Handler) BeginPasskeyRegistration(ctx context.Context, req *connect.Request[userv1.BeginPasskeyRegistrationRequest]) (*connect.Response[userv1.BeginPasskeyRegistrationResponse], error) {
|
|
// // Get user ID from context
|
|
// userid, ok := interceptors.GetUserContext(ctx)
|
|
// if !ok {
|
|
// return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("user not authenticated"))
|
|
// }
|
|
|
|
// // Get user
|
|
// user := models.User{}
|
|
// if err := h.db.First(&user, "id = ?", userid).Error; err != nil {
|
|
// return nil, connect.NewError(connect.CodeInternal, err)
|
|
// }
|
|
|
|
// return connect.NewResponse(&userv1.BeginPasskeyRegistrationResponse{}), nil
|
|
// }
|
|
|
|
// func (h *Handler) FinishPasskeyRegistration(ctx context.Context, req *connect.Request[userv1.FinishPasskeyRegistrationRequest]) (*connect.Response[userv1.FinishPasskeyRegistrationResponse], error) {
|
|
// // Get user ID from context
|
|
// userid, ok := interceptors.GetUserContext(ctx)
|
|
// if !ok {
|
|
// return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("user not authenticated"))
|
|
// }
|
|
|
|
// // Get user
|
|
// user := models.User{}
|
|
// if err := h.db.First(&user, "id = ?", userid).Error; err != nil {
|
|
// return nil, connect.NewError(connect.CodeInternal, err)
|
|
// }
|
|
|
|
// return connect.NewResponse(&userv1.FinishPasskeyRegistrationResponse{}), nil
|
|
// }
|
|
|
|
// func BeginRegistration(ctx context.Context) error {
|
|
// userid, ok := interceptors.GetUserContext(ctx)
|
|
// if !ok {
|
|
// return nil
|
|
// }
|
|
|
|
// wconfig := &webauthn.Config{
|
|
// RPDisplayName: "Go Webauthn", // Display Name for your site
|
|
// RPID: "go-webauthn.local", // Generally the FQDN for your site
|
|
// RPOrigins: []string{"https://login.go-webauthn.local"}, // The origin URLs allowed for WebAuthn requests
|
|
// }
|
|
// webAuthn, err := webauthn.New(wconfig)
|
|
// if err != nil {
|
|
// return nil
|
|
// }
|
|
|
|
// var user webauthn.User
|
|
// user.WebAuthnCredentials()
|
|
|
|
// var cred webauthn.Credential
|
|
// cred.Verify()
|
|
|
|
// var test metadata.Provider
|
|
// test.
|
|
|
|
// options, session, err := webAuthn.BeginRegistration(user)
|
|
|
|
// return nil
|
|
// }
|
|
|
|
func NewHandler(db *sqlc.Queries, key string) (string, http.Handler) {
|
|
interceptors := connect.WithInterceptors(interceptors.NewAuthInterceptor(key))
|
|
|
|
return userv1connect.NewUserServiceHandler(
|
|
&Handler{
|
|
db: db,
|
|
key: []byte(key),
|
|
},
|
|
interceptors,
|
|
)
|
|
}
|