add
This commit is contained in:
@@ -2,11 +2,6 @@ package main
|
||||
|
||||
import (
|
||||
"context"
|
||||
"fmt"
|
||||
"io"
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"strings"
|
||||
"net/http"
|
||||
"os"
|
||||
"os/signal"
|
||||
@@ -17,9 +12,10 @@ import (
|
||||
"common/db"
|
||||
"common/logger"
|
||||
"common/utils"
|
||||
"common/types"
|
||||
"golang.org/x/crypto/bcrypt"
|
||||
"github.com/jackc/pgconn"
|
||||
"user/internal/handler"
|
||||
"user/internal/repository"
|
||||
"user/internal/router"
|
||||
"user/internal/service"
|
||||
)
|
||||
|
||||
var pg *sql.DB
|
||||
@@ -65,133 +61,10 @@ func main() {
|
||||
}
|
||||
|
||||
func routes() http.Handler {
|
||||
mux := http.NewServeMux()
|
||||
mux.HandleFunc("/healthz", func(w http.ResponseWriter, r *http.Request) {
|
||||
writeJSON(w, http.StatusOK, true, "ok", nil)
|
||||
})
|
||||
mux.HandleFunc("/version", func(w http.ResponseWriter, r *http.Request) {
|
||||
writeJSON(w, http.StatusOK, true, "ok", map[string]string{"version": "user-service v0.1.0"})
|
||||
})
|
||||
mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
|
||||
writeJSON(w, http.StatusOK, true, "ok", map[string]string{"service": "user"})
|
||||
})
|
||||
mux.HandleFunc("/register", registerHandler)
|
||||
mux.HandleFunc("/login", loginHandler)
|
||||
return mux
|
||||
}
|
||||
|
||||
type registerReq struct {
|
||||
Account string `json:"account"`
|
||||
Password string `json:"password"`
|
||||
}
|
||||
type loginReq struct {
|
||||
Account string `json:"account"`
|
||||
Password string `json:"password"`
|
||||
}
|
||||
type loginResp struct {
|
||||
UserID string `json:"user_id"`
|
||||
}
|
||||
|
||||
func registerHandler(w http.ResponseWriter, r *http.Request) {
|
||||
if r.Method != http.MethodPost {
|
||||
writeJSON(w, http.StatusMethodNotAllowed, false, "method not allowed", nil)
|
||||
return
|
||||
}
|
||||
var req registerReq
|
||||
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
|
||||
writeJSON(w, http.StatusBadRequest, false, "invalid json", nil)
|
||||
return
|
||||
}
|
||||
if !validAccount(req.Account) || !validPassword(req.Password) {
|
||||
writeJSON(w, http.StatusBadRequest, false, "invalid account or password", nil)
|
||||
return
|
||||
}
|
||||
hashed, err := bcrypt.GenerateFromPassword([]byte(req.Password), 12)
|
||||
if err != nil {
|
||||
writeJSON(w, http.StatusInternalServerError, false, "internal error", nil)
|
||||
return
|
||||
}
|
||||
tx, err := pg.Begin()
|
||||
if err != nil {
|
||||
writeJSON(w, http.StatusInternalServerError, false, "internal error", nil)
|
||||
return
|
||||
}
|
||||
defer func() {
|
||||
_ = tx.Rollback()
|
||||
}()
|
||||
var userID string
|
||||
if err := tx.QueryRow(`INSERT INTO users DEFAULT VALUES RETURNING user_id`).Scan(&userID); err != nil {
|
||||
writeJSON(w, http.StatusInternalServerError, false, "internal error", nil)
|
||||
return
|
||||
}
|
||||
if _, err := tx.Exec(`INSERT INTO user_login_accounts (user_id, value, deleted) VALUES ($1, $2, false)`, userID, req.Account); err != nil {
|
||||
if isUniqueViolation(err) {
|
||||
writeJSON(w, http.StatusConflict, false, "account exists", nil)
|
||||
return
|
||||
}
|
||||
writeJSON(w, http.StatusInternalServerError, false, "internal error", nil)
|
||||
return
|
||||
}
|
||||
if _, err := tx.Exec(`INSERT INTO user_login_passwords (user_id, value, deleted) VALUES ($1, $2, false)`, userID, string(hashed)); err != nil {
|
||||
writeJSON(w, http.StatusInternalServerError, false, "internal error", nil)
|
||||
return
|
||||
}
|
||||
if err := tx.Commit(); err != nil {
|
||||
writeJSON(w, http.StatusInternalServerError, false, "internal error", nil)
|
||||
return
|
||||
}
|
||||
writeJSON(w, http.StatusCreated, true, "ok", map[string]string{"user_id": userID})
|
||||
}
|
||||
|
||||
func loginHandler(w http.ResponseWriter, r *http.Request) {
|
||||
if r.Method != http.MethodPost {
|
||||
writeJSON(w, http.StatusMethodNotAllowed, false, "method not allowed", nil)
|
||||
return
|
||||
}
|
||||
var req loginReq
|
||||
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
|
||||
writeJSON(w, http.StatusBadRequest, false, "invalid json", nil)
|
||||
return
|
||||
}
|
||||
if !validAccount(req.Account) || !validPassword(req.Password) {
|
||||
writeJSON(w, http.StatusBadRequest, false, "invalid account or password", nil)
|
||||
return
|
||||
}
|
||||
var userID string
|
||||
if err := pg.QueryRow(`SELECT user_id FROM user_login_accounts WHERE value = $1 AND deleted = false`, req.Account).Scan(&userID); err != nil {
|
||||
writeJSON(w, http.StatusUnauthorized, false, "unauthorized", nil)
|
||||
return
|
||||
}
|
||||
var hashed string
|
||||
if err := pg.QueryRow(`SELECT value FROM user_login_passwords WHERE user_id = $1 AND deleted = false`, userID).Scan(&hashed); err != nil {
|
||||
writeJSON(w, http.StatusUnauthorized, false, "unauthorized", nil)
|
||||
return
|
||||
}
|
||||
if bcrypt.CompareHashAndPassword([]byte(hashed), []byte(req.Password)) != nil {
|
||||
writeJSON(w, http.StatusUnauthorized, false, "unauthorized", nil)
|
||||
return
|
||||
}
|
||||
writeJSON(w, http.StatusOK, true, "ok", map[string]string{"user_id": userID})
|
||||
}
|
||||
|
||||
func validAccount(a string) bool {
|
||||
n := len(a)
|
||||
return n >= 3 && n <= 100
|
||||
}
|
||||
func validPassword(p string) bool {
|
||||
n := len(p)
|
||||
return n >= 8 && n <= 128
|
||||
}
|
||||
|
||||
func isUniqueViolation(err error) bool {
|
||||
var pe *pgconn.PgError
|
||||
if errors.As(err, &pe) {
|
||||
return pe.Code == "23505"
|
||||
}
|
||||
if err != nil && (strings.Contains(err.Error(), "duplicate key") || strings.Contains(err.Error(), "unique constraint")) {
|
||||
return true
|
||||
}
|
||||
return false
|
||||
repo := repository.New(pg)
|
||||
svc := service.New(repo)
|
||||
h := handler.New(svc)
|
||||
return router.New(h)
|
||||
}
|
||||
|
||||
func applySchema(path string) error {
|
||||
@@ -202,9 +75,3 @@ func applySchema(path string) error {
|
||||
_, err = pg.Exec(string(b))
|
||||
return err
|
||||
}
|
||||
|
||||
func writeJSON(w http.ResponseWriter, code int, status bool, msg string, data interface{}) {
|
||||
w.Header().Set("Content-Type", "application/json")
|
||||
w.WriteHeader(code)
|
||||
json.NewEncoder(w).Encode(types.Response{Status: status, Message: msg, Data: data})
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user