125 lines
3.3 KiB
Go
125 lines
3.3 KiB
Go
package user
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"jannex/admin-dashboard-backend/modules/database"
|
|
"jannex/admin-dashboard-backend/modules/logger"
|
|
"jannex/admin-dashboard-backend/modules/structs"
|
|
"jannex/admin-dashboard-backend/modules/utils"
|
|
"jannex/admin-dashboard-backend/socketclients"
|
|
|
|
"git.ex.umbach.dev/Alex/roese-utils/rslogger"
|
|
"git.ex.umbach.dev/Alex/roese-utils/rsutils"
|
|
"github.com/gofiber/fiber/v2"
|
|
"github.com/rs/zerolog/log"
|
|
"github.com/savsgio/gotils/uuid"
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
func UserLogin(c *fiber.Ctx) error {
|
|
// swagger:operation POST /user/auth/login user userLogin
|
|
// ---
|
|
// summary: Login user
|
|
// consumes:
|
|
// - application/json
|
|
// produces:
|
|
// - application/json
|
|
// parameters:
|
|
// - name: body
|
|
// in: body
|
|
// schema:
|
|
// "$ref": "#/definitions/UserLoginRequest"
|
|
// responses:
|
|
// '200':
|
|
// description: User logged in successfully
|
|
// schema:
|
|
// "$ref": "#/definitions/UserLoginResponse"
|
|
// '400':
|
|
// description: Invalid request body
|
|
// '401':
|
|
// description: Incorrect password or user deactivated
|
|
// '500':
|
|
// description: Failed to login user
|
|
|
|
var body structs.UserLoginRequest
|
|
|
|
if err := rsutils.BodyParserHelper(c, &body); err != nil {
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
|
|
decodedPassword, err := base64.StdEncoding.DecodeString(body.Password)
|
|
|
|
if err != nil {
|
|
log.Error().Msg("Failed to decode base64 password, err: " + err.Error())
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
|
|
if passwordValid := utils.IsPasswordLengthValid(string(decodedPassword)); !passwordValid {
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
|
|
var user structs.User
|
|
|
|
database.DB.First(&user, "username = ?", body.Username)
|
|
|
|
if user.Id == "" {
|
|
log.Error().Msg("User not found")
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
|
|
if err := bcrypt.CompareHashAndPassword([]byte(user.Password), decodedPassword); err != nil {
|
|
log.Error().Msg("Incorrect password")
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
|
|
if user.Deactivated {
|
|
return c.SendStatus(fiber.StatusUnauthorized)
|
|
}
|
|
|
|
session, err := rsutils.GenerateSession()
|
|
|
|
if err != nil {
|
|
return c.SendStatus(fiber.StatusInternalServerError)
|
|
}
|
|
|
|
database.DB.Create(&structs.UserSession{
|
|
Id: session,
|
|
IdForDeletion: uuid.V4(),
|
|
UserId: user.Id,
|
|
UserAgent: string(c.Context().UserAgent()),
|
|
ExpiresAt: utils.GetSessionExpiresAtTime()})
|
|
|
|
logger.AddSystemLog(rslogger.LogTypeInfo, "User %s has logged in", user.Id)
|
|
|
|
return c.JSON(structs.UserLoginResponse{Session: session})
|
|
}
|
|
|
|
func UserLogout(c *fiber.Ctx) error {
|
|
// swagger:operation DELETE /user/auth/logout user userLogout
|
|
// ---
|
|
// summary: Logout user
|
|
// consumes:
|
|
// - application/json
|
|
// produces:
|
|
// - application/json
|
|
// parameters:
|
|
// - name: X-Authorization
|
|
// in: header
|
|
// description: User session id
|
|
// responses:
|
|
// '201':
|
|
// description: User logged out successfully
|
|
// '500':
|
|
// description: Failed to logout user
|
|
|
|
session := utils.GetXAuhorizationHeader(c)
|
|
|
|
database.DB.Delete(&structs.UserSession{}, "id = ?", session)
|
|
|
|
socketclients.CloseAllUserSessionConnections(session)
|
|
|
|
logger.AddSystemLog(rslogger.LogTypeInfo, "User %s has logged out", c.Locals("userId").(string))
|
|
|
|
return c.SendStatus(fiber.StatusCreated)
|
|
}
|