167be9b0b3
- Add avatar upload functionality with public URL access. - Implement user login with email and password authentication. - Create endpoints for fetching and updating the authenticated user's profile. - Set up database migrations for user profiles, including email and role management. - Introduce personal data management linked to user profiles. - Add email verification process with welcome email templates.
63 lines
1.8 KiB
Go
63 lines
1.8 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
|
|
"encore.dev/beta/auth"
|
|
"encore.dev/beta/errs"
|
|
"encore.dev/types/uuid"
|
|
)
|
|
|
|
type RegisterParams struct {
|
|
UserID uuid.UUID `json:"user_id"`
|
|
Password string `json:"password" encore:"sensitive"`
|
|
}
|
|
|
|
// Register stores the initial password hash for a newly created profile.
|
|
// Called directly (service-to-service) by profiles.Insert during registration,
|
|
// since that flow needs to know immediately whether credential setup succeeded.
|
|
//
|
|
//encore:api private method=POST path=/auth/credentials
|
|
func Register(ctx context.Context, p *RegisterParams) error {
|
|
hash, err := hashPassword(p.Password)
|
|
if err != nil {
|
|
return errs.WrapCode(err, errs.Internal, "failed to hash password")
|
|
}
|
|
_, err = db.Exec(ctx, `
|
|
INSERT INTO credentials (user_id, password_hash) VALUES ($1, $2)
|
|
`, p.UserID, hash)
|
|
if err != nil {
|
|
return errs.WrapCode(err, errs.Internal, "failed to store credentials")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type SetPasswordParams struct {
|
|
Password string `json:"password" encore:"sensitive"`
|
|
}
|
|
|
|
// SetPassword changes the password for the authenticated user.
|
|
//
|
|
//encore:api auth method=PUT path=/auth/password
|
|
func SetPassword(ctx context.Context, p *SetPasswordParams) error {
|
|
uid, ok := auth.UserID()
|
|
if !ok {
|
|
return &errs.Error{Code: errs.Unauthenticated, Message: "missing auth"}
|
|
}
|
|
userID, err := uuid.FromString(string(uid))
|
|
if err != nil {
|
|
return errs.WrapCode(err, errs.Internal, "invalid user id")
|
|
}
|
|
hash, err := hashPassword(p.Password)
|
|
if err != nil {
|
|
return errs.WrapCode(err, errs.Internal, "failed to hash password")
|
|
}
|
|
_, err = db.Exec(ctx, `
|
|
UPDATE credentials SET password_hash = $2, updated_at = NOW() WHERE user_id = $1
|
|
`, userID, hash)
|
|
if err != nil {
|
|
return errs.WrapCode(err, errs.Internal, "failed to update password")
|
|
}
|
|
return nil
|
|
}
|