Gabriel Kaszewski
bf148902ab
server: - backup exporter, auth extractors, error shapes, CONTEXT (prior work) - spa assets served outside the rate limit via route_layer - requests_per_second went to per_second(), which takes an interval not a rate: 50 meant one request per 50s once burst was spent. now converted properly. 15/s, burst 60 spa fixes: - account delete cleared snake_case token keys that were never written - refresh interceptor could retry forever - date ranges used local day boundaries stamped +00:00 - "all" period trend plotted one page; calendar days fabricated mood 3 - chart grid invisible: hsl(var(--border)) against rgba tokens - blob url leak, orphaned media on failed save, devtools in prod bundle - pt-safe/safe-area-pb classes never existed spa features: - offline outbox: entries queue to IndexedDB, replay with backoff, only server refusals count against an entry - drafts persist, quick-log sheet, diary infinite scroll + filters - route error boundary, stale-chunk recovery, no service worker in dev a11y + perf: - mood picker is a radiogroup, activity picker keyboard-operable, text alternatives for colour/emoji, locale week start - dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1 - initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components and 5 deps dropped; fonts 218->133kB 53 tests added (43 spa, 10 server)
96 lines
3.4 KiB
Rust
96 lines
3.4 KiB
Rust
use axum::Json;
|
|
use axum::extract::State;
|
|
use axum::http::StatusCode;
|
|
|
|
use api_types::requests::LoginRequest;
|
|
use api_types::responses::{ErrorResponse, RefreshedResponse, SignedInResponse, UserResponse};
|
|
use application::auth::use_cases::{login, logout, refresh};
|
|
|
|
use crate::errors::ApiError;
|
|
use crate::extractors::Body;
|
|
use crate::state::AppState;
|
|
|
|
#[utoipa::path(post, path = "/api/v1/auth/login", tag = "auth",
|
|
request_body = LoginRequest,
|
|
responses((status = 200, body = SignedInResponse),
|
|
(status = 400, description = "Malformed request", body = ErrorResponse),
|
|
(status = 422, description = "Understood but refused", body = ErrorResponse))
|
|
)]
|
|
pub async fn handle_login(
|
|
State(state): State<AppState>,
|
|
Body(body): Body<LoginRequest>,
|
|
) -> Result<Json<SignedInResponse>, ApiError> {
|
|
let cmd = body.into_command();
|
|
let deps = login::Deps {
|
|
user_query: state.user_query,
|
|
password_hasher: state.password_hasher,
|
|
auth_service: state.auth_service,
|
|
refresh_session_command: state.refresh_session_command,
|
|
refresh_token_ttl_seconds: state.auth_config.refresh_token_ttl_seconds as i64,
|
|
};
|
|
|
|
let result = login::execute(cmd, &deps).await?;
|
|
|
|
Ok(Json(SignedInResponse {
|
|
access_token: result.access_token.token().to_string(),
|
|
refresh_token: result.refresh_token,
|
|
expires_at: *result.access_token.expires_at(),
|
|
user: UserResponse::from(result.user),
|
|
}))
|
|
}
|
|
|
|
#[derive(serde::Deserialize, utoipa::ToSchema)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct RefreshRequest {
|
|
pub refresh_token: String,
|
|
}
|
|
|
|
#[utoipa::path(post, path = "/api/v1/auth/refresh", tag = "auth",
|
|
request_body = RefreshRequest,
|
|
responses((status = 200, body = RefreshedResponse),
|
|
(status = 400, description = "Malformed request", body = ErrorResponse),
|
|
(status = 422, description = "Understood but refused", body = ErrorResponse))
|
|
)]
|
|
pub async fn handle_refresh(
|
|
State(state): State<AppState>,
|
|
Body(body): Body<RefreshRequest>,
|
|
) -> Result<Json<RefreshedResponse>, ApiError> {
|
|
let deps = refresh::Deps {
|
|
auth_service: state.auth_service,
|
|
refresh_session_command: state.refresh_session_command,
|
|
refresh_session_query: state.refresh_session_query,
|
|
refresh_token_ttl_seconds: state.auth_config.refresh_token_ttl_seconds as i64,
|
|
};
|
|
|
|
let result = refresh::execute(&body.refresh_token, &deps).await?;
|
|
|
|
Ok(Json(RefreshedResponse {
|
|
access_token: result.access_token.token().to_string(),
|
|
refresh_token: result.refresh_token,
|
|
expires_at: *result.access_token.expires_at(),
|
|
}))
|
|
}
|
|
|
|
#[derive(serde::Deserialize, utoipa::ToSchema)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct LogoutRequest {
|
|
pub refresh_token: String,
|
|
}
|
|
|
|
#[utoipa::path(post, path = "/api/v1/auth/logout", tag = "auth",
|
|
request_body = LogoutRequest,
|
|
responses((status = 204, description = "Logged out"),
|
|
(status = 400, description = "Malformed request", body = ErrorResponse),
|
|
(status = 422, description = "Understood but refused", body = ErrorResponse))
|
|
)]
|
|
pub async fn handle_logout(
|
|
State(state): State<AppState>,
|
|
Body(body): Body<LogoutRequest>,
|
|
) -> Result<StatusCode, ApiError> {
|
|
let deps = logout::Deps {
|
|
refresh_session_command: state.refresh_session_command,
|
|
};
|
|
logout::execute(&body.refresh_token, &deps).await?;
|
|
Ok(StatusCode::NO_CONTENT)
|
|
}
|