renommage lassistanoque

backend/internal/http/handlers/auth.go

@@ -0,0 +1,91 @@
+package handlers
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+
+	"github.com/labstack/echo/v5"
+	"trankilou.fr/lassistanoque/backend/internal/domain"
+	"trankilou.fr/lassistanoque/backend/internal/service/auth"
+)
+
+func NewAuthGroup(prefix string, e *echo.Group, service *auth.Service) *echo.Group {
+	authHandler := &AuthHandler{
+		authService: service,
+	}
+	auth := e.Group(prefix)
+	auth.POST("/login", authHandler.Login)
+	auth.GET("/oidc/callback", authHandler.OIDCCallback)
+	auth.POST("/register", authHandler.Register)
+	return auth
+}
+
+type AuthHandler struct {
+	authService *auth.Service
+}
+
+type loginRequest struct {
+	Email    string `json:"email" validate:"required,email"`
+	Password string `json:"password" validate:"required"`
+}
+
+type loginResponse struct {
+	AccessToken  string       `json:"accessToken"`
+	RefreshToken string       `json:"refreshToken"`
+	ExpiresAt    string       `json:"expiresAt"`
+	User         *domain.User `json:"user"`
+}
+
+func (h AuthHandler) Login(c *echo.Context) error {
+	var req loginRequest
+	if err := c.Bind(&req); err != nil {
+		return echo.NewHTTPError(http.StatusBadRequest, "invalid request")
+	}
+	if req.Email == "" || req.Password == "" {
+		return echo.NewHTTPError(http.StatusBadRequest, "email and password are required")
+	}
+
+	creds := auth.Credentials{
+		Method:   "password",
+		Email:    req.Email,
+		Password: req.Password,
+	}
+
+	session, err := h.authService.Login(context.Background(), creds)
+	if err != nil {
+		c.Logger().Error(fmt.Sprintf("error while login: %s", err))
+		return echo.NewHTTPError(http.StatusUnauthorized, "login error")
+	}
+
+	resp := loginResponse{
+		AccessToken:  session.AccessToken,
+		RefreshToken: session.RefreshToken,
+		ExpiresAt:    session.ExpiresAt.Format("2006-01-02T15:04:05Z07:00"),
+	}
+	resp.User = session.User
+
+	return c.JSON(http.StatusOK, resp)
+}
+
+func (h AuthHandler) OIDCCallback(c *echo.Context) error {
+	return nil
+}
+
+func (h AuthHandler) Register(c *echo.Context) error {
+
+	reader := c.Request().Body
+	var registration auth.Registration
+	decoder := json.NewDecoder(reader)
+	err := decoder.Decode(&registration)
+	if err != nil {
+		return c.String(http.StatusBadRequest, "malformatted registration")
+	}
+
+	user, err := h.authService.Register(registration)
+	if err != nil {
+		return c.String(http.StatusBadRequest, err.Error())
+	}
+	return c.JSON(http.StatusCreated, user)
+}