FernandoJVideira
c4ee0ce4dc
Rename the module, proto service, and all identifiers from simple_bank/ SimpleBank to api_tmpl/ApiTmpl, and regenerate the gRPC/gateway/swagger/ mock code accordingly. - Scrub real secrets (SMTP password, auth token secret) from api.env/ api_test.env, untrack them, and add api.env.example/api_test.env.example - Remove committed build artifacts (tmp/main, tmp/build-errors.log, dbml-error.log) and gitignore them going forward - Fix Dockerfile paths (build target, migrations copy) that referenced a stale project layout - Rewrite README to match the actual cmd/ + internal/ structure and add a "using this as a template" section
65 lines
1.9 KiB
Go
65 lines
1.9 KiB
Go
package gapi
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"strings"
|
|
|
|
db "github.com/FernandoJVideira/api_tmpl/internal/db/sqlc"
|
|
"github.com/FernandoJVideira/api_tmpl/internal/service"
|
|
"github.com/FernandoJVideira/api_tmpl/internal/val"
|
|
"github.com/FernandoJVideira/api_tmpl/pb"
|
|
"google.golang.org/genproto/googleapis/rpc/errdetails"
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/status"
|
|
)
|
|
|
|
func (s *Server) LoginUser(ctx context.Context, req *pb.LoginUserRequest) (*pb.LoginUserResponse, error) {
|
|
violations := validateLoginUserRequest(req)
|
|
if violations != nil {
|
|
return nil, invalidArgumentError(violations)
|
|
}
|
|
|
|
mtdt := s.extractMetadata(ctx)
|
|
|
|
result, err := s.authService.Login(ctx, service.LoginCredentials{
|
|
Username: req.GetUsername(),
|
|
Password: req.GetPassword(),
|
|
UserAgent: mtdt.UserAgent,
|
|
ClientIP: mtdt.ClientIP,
|
|
})
|
|
|
|
if err != nil {
|
|
errMsg := err.Error()
|
|
if errors.Is(err, db.ErrRecordNotFound) || strings.Contains(errMsg, "user not found") {
|
|
return nil, status.Errorf(codes.NotFound, "user not found")
|
|
}
|
|
if strings.Contains(errMsg, "incorrect password") {
|
|
return nil, status.Errorf(codes.Unauthenticated, "incorrect password")
|
|
}
|
|
return nil, status.Errorf(codes.Internal, "failed to login: %v", err)
|
|
}
|
|
|
|
resp := convertLoginUserResponse(
|
|
result.User,
|
|
result.SessionID,
|
|
result.AccessToken,
|
|
result.RefreshToken,
|
|
result.AccessTokenExpiresAt,
|
|
result.RefreshTokenExpiresAt,
|
|
)
|
|
return resp, nil
|
|
}
|
|
|
|
// TODO: Change to throw "username or password is incorrect" instead of specifying which one is wrong
|
|
func validateLoginUserRequest(req *pb.LoginUserRequest) (violations []*errdetails.BadRequest_FieldViolation) {
|
|
if err := val.ValidateUsername(req.GetUsername()); err != nil {
|
|
violations = append(violations, fieldViolation("username", err))
|
|
}
|
|
|
|
if err := val.ValidatePassword(req.GetPassword()); err != nil {
|
|
violations = append(violations, fieldViolation("password", err))
|
|
}
|
|
return violations
|
|
}
|