mirror of
https://github.com/idanoo/autobrr
synced 2025-07-22 08:19:12 +00:00
99 lines
2.5 KiB
Go
99 lines
2.5 KiB
Go
// Copyright (c) 2021 - 2023, Ludvig Lundgren and the autobrr contributors.
|
|
// SPDX-License-Identifier: GPL-2.0-or-later
|
|
|
|
package auth
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/autobrr/autobrr/internal/domain"
|
|
"github.com/autobrr/autobrr/internal/logger"
|
|
"github.com/autobrr/autobrr/internal/user"
|
|
"github.com/autobrr/autobrr/pkg/argon2id"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/rs/zerolog"
|
|
)
|
|
|
|
type Service interface {
|
|
GetUserCount(ctx context.Context) (int, error)
|
|
Login(ctx context.Context, username, password string) (*domain.User, error)
|
|
CreateUser(ctx context.Context, req domain.CreateUserRequest) error
|
|
}
|
|
|
|
type service struct {
|
|
log zerolog.Logger
|
|
userSvc user.Service
|
|
}
|
|
|
|
func NewService(log logger.Logger, userSvc user.Service) Service {
|
|
return &service{
|
|
log: log.With().Str("module", "auth").Logger(),
|
|
userSvc: userSvc,
|
|
}
|
|
}
|
|
|
|
func (s *service) GetUserCount(ctx context.Context) (int, error) {
|
|
return s.userSvc.GetUserCount(ctx)
|
|
}
|
|
|
|
func (s *service) Login(ctx context.Context, username, password string) (*domain.User, error) {
|
|
if username == "" || password == "" {
|
|
return nil, errors.New("empty credentials supplied")
|
|
}
|
|
|
|
// find user
|
|
u, err := s.userSvc.FindByUsername(ctx, username)
|
|
if err != nil {
|
|
s.log.Error().Err(err).Msgf("could not find user by username: %v", username)
|
|
return nil, errors.Wrapf(err, "invalid login: %s", username)
|
|
}
|
|
|
|
if u == nil {
|
|
return nil, errors.Errorf("invalid login: %s", username)
|
|
}
|
|
|
|
// compare password from request and the saved password
|
|
match, err := argon2id.ComparePasswordAndHash(password, u.Password)
|
|
if err != nil {
|
|
return nil, errors.New("error checking credentials")
|
|
}
|
|
|
|
if !match {
|
|
s.log.Error().Msg("bad credentials")
|
|
return nil, errors.Errorf("invalid login: %s", username)
|
|
}
|
|
|
|
return u, nil
|
|
}
|
|
|
|
func (s *service) CreateUser(ctx context.Context, req domain.CreateUserRequest) error {
|
|
if req.Username == "" {
|
|
return errors.New("validation error: empty username supplied")
|
|
} else if req.Password == "" {
|
|
return errors.New("validation error: empty password supplied")
|
|
}
|
|
|
|
userCount, err := s.userSvc.GetUserCount(ctx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if userCount > 0 {
|
|
return errors.New("only 1 user account is supported at the moment")
|
|
}
|
|
|
|
hashed, err := argon2id.CreateHash(req.Password, argon2id.DefaultParams)
|
|
if err != nil {
|
|
return errors.New("failed to hash password")
|
|
}
|
|
|
|
req.Password = hashed
|
|
|
|
if err := s.userSvc.CreateUser(ctx, req); err != nil {
|
|
s.log.Error().Err(err).Msgf("could not create user: %s", req.Username)
|
|
return errors.New("failed to create new user")
|
|
}
|
|
|
|
return nil
|
|
}
|