Gabriel Kaszewski
5e0dde656c
drop PersistedImportSession, rename LoginQuery→LoginCommand, own DeleteAccountDeps, PersonId via uuid_id! macro, rename SortDirection→ ReviewSortBy, TUI fs::read→Command, generic PaginatedResponse<T>
59 lines
1.7 KiB
Rust
59 lines
1.7 KiB
Rust
use chrono::{DateTime, Duration, Utc};
|
|
use uuid::Uuid;
|
|
|
|
use domain::{errors::DomainError, models::RefreshSession, value_objects::Email};
|
|
|
|
use crate::auth::{deps::LoginDeps, queries::LoginCommand};
|
|
|
|
pub struct LoginResult {
|
|
pub token: String,
|
|
pub refresh_token: String,
|
|
pub user_id: Uuid,
|
|
pub email: String,
|
|
pub expires_at: DateTime<Utc>,
|
|
pub role: domain::models::UserRole,
|
|
}
|
|
|
|
pub async fn execute(deps: &LoginDeps, query: LoginCommand) -> Result<LoginResult, DomainError> {
|
|
let email = Email::new(query.email)?;
|
|
let user = deps
|
|
.user
|
|
.find_by_email(&email)
|
|
.await?
|
|
.ok_or_else(|| DomainError::Unauthorized("Invalid credentials".into()))?;
|
|
|
|
let valid = deps
|
|
.password_hasher
|
|
.verify(&query.password, user.password_hash())
|
|
.await?;
|
|
if !valid {
|
|
return Err(DomainError::Unauthorized("Invalid credentials".into()));
|
|
}
|
|
|
|
let generated = deps.auth.generate_token(user.id()).await?;
|
|
|
|
let refresh_token = Uuid::new_v4().to_string();
|
|
let refresh_expires = Utc::now() + Duration::seconds(deps.config.refresh_ttl_seconds as i64);
|
|
let session = RefreshSession {
|
|
id: Uuid::new_v4(),
|
|
user_id: user.id().clone(),
|
|
token: refresh_token.clone(),
|
|
expires_at: refresh_expires,
|
|
created_at: Utc::now(),
|
|
};
|
|
deps.refresh_session.create(&session).await?;
|
|
|
|
Ok(LoginResult {
|
|
token: generated.token,
|
|
refresh_token,
|
|
user_id: user.id().value(),
|
|
email: user.email().value().to_string(),
|
|
expires_at: generated.expires_at,
|
|
role: user.role().clone(),
|
|
})
|
|
}
|
|
|
|
#[cfg(test)]
|
|
#[path = "tests/login.rs"]
|
|
mod tests;
|