iu
2b2b342492
Backend (Go/Gin/pgx): env config, pgx pool with retries, Garage S3 client (path-style, region garage), embedded golang-migrate migrations, JWT auth with refresh rotation, albums CRUD, members/roles/invites with no-escalation matrix, photo upload + async imaging/goexif WebP variants, cursor pagination, presigned URLs, likes/comments, SSE hub (album + personal), notifications, share links. Frontend (SvelteKit 2 + Svelte 5 + Tailwind v4): API wrapper with 401 refresh, auth store, all screens, Uploader/PhotoGrid/Lightbox/Comments, SSE client with reconnect + REST catch-up, three themes + system via data-theme. Deploy without Docker: Makefile builds the frontend into backend/static and embeds it (go:embed) into a single statically linked binary; systemd unit and nginx SSE example included. Use gen2brain/webp (-tags nodynamic) instead of cgo kolesa-team/go-webp to keep CGO_ENABLED=0 static builds; design.md/proposal.md updated accordingly.
95 lines
2.6 KiB
Go
95 lines
2.6 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
|
|
"github.com/jackc/pgx/v5"
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
|
|
"shared-album/internal/models"
|
|
)
|
|
|
|
var ErrNotFound = errors.New("not found")
|
|
|
|
type Store struct {
|
|
pool *pgxpool.Pool
|
|
}
|
|
|
|
func NewStore(pool *pgxpool.Pool) *Store { return &Store{pool: pool} }
|
|
|
|
func (s *Store) CreateUser(ctx context.Context, u *models.User) error {
|
|
_, err := s.pool.Exec(ctx,
|
|
`INSERT INTO users (id, email, password_hash, name, avatar_url)
|
|
VALUES ($1, $2, $3, $4, $5)`,
|
|
u.ID, u.Email, u.PasswordHash, u.Name, nullIfEmpty(u.AvatarURL),
|
|
)
|
|
return err
|
|
}
|
|
|
|
func (s *Store) GetUserByEmail(ctx context.Context, email string) (*models.User, error) {
|
|
return s.scanUser(s.pool.QueryRow(ctx,
|
|
`SELECT id, email, password_hash, name, COALESCE(avatar_url, ''), created_at
|
|
FROM users WHERE lower(email) = lower($1)`, email))
|
|
}
|
|
|
|
func (s *Store) GetUserByID(ctx context.Context, id string) (*models.User, error) {
|
|
return s.scanUser(s.pool.QueryRow(ctx,
|
|
`SELECT id, email, password_hash, name, COALESCE(avatar_url, ''), created_at
|
|
FROM users WHERE id = $1`, id))
|
|
}
|
|
|
|
func (s *Store) scanUser(row pgx.Row) (*models.User, error) {
|
|
var u models.User
|
|
if err := row.Scan(&u.ID, &u.Email, &u.PasswordHash, &u.Name, &u.AvatarURL, &u.CreatedAt); err != nil {
|
|
if errors.Is(err, pgx.ErrNoRows) {
|
|
return nil, ErrNotFound
|
|
}
|
|
return nil, err
|
|
}
|
|
return &u, nil
|
|
}
|
|
|
|
func (s *Store) CreateRefreshToken(ctx context.Context, t *models.RefreshToken) error {
|
|
_, err := s.pool.Exec(ctx,
|
|
`INSERT INTO refresh_tokens (id, user_id, token_hash, expires_at)
|
|
VALUES ($1, $2, $3, $4)`,
|
|
t.ID, t.UserID, t.TokenHash, t.ExpiresAt,
|
|
)
|
|
return err
|
|
}
|
|
|
|
func (s *Store) GetRefreshToken(ctx context.Context, hash string) (*models.RefreshToken, error) {
|
|
var t models.RefreshToken
|
|
err := s.pool.QueryRow(ctx,
|
|
`SELECT id, user_id, token_hash, expires_at, revoked_at, created_at
|
|
FROM refresh_tokens WHERE token_hash = $1`, hash).
|
|
Scan(&t.ID, &t.UserID, &t.TokenHash, &t.ExpiresAt, &t.RevokedAt, &t.CreatedAt)
|
|
if err != nil {
|
|
if errors.Is(err, pgx.ErrNoRows) {
|
|
return nil, ErrNotFound
|
|
}
|
|
return nil, err
|
|
}
|
|
return &t, nil
|
|
}
|
|
|
|
func (s *Store) RevokeRefreshToken(ctx context.Context, id string) error {
|
|
_, err := s.pool.Exec(ctx,
|
|
`UPDATE refresh_tokens SET revoked_at = now() WHERE id = $1 AND revoked_at IS NULL`, id)
|
|
return err
|
|
}
|
|
|
|
func (s *Store) RevokeAllUserTokens(ctx context.Context, userID string) error {
|
|
_, err := s.pool.Exec(ctx,
|
|
`UPDATE refresh_tokens SET revoked_at = now() WHERE user_id = $1 AND revoked_at IS NULL`, userID)
|
|
return err
|
|
}
|
|
|
|
func nullIfEmpty(s string) *string {
|
|
if s == "" {
|
|
return nil
|
|
}
|
|
return &s
|
|
}
|