Merge pull request #11 from hammercode-dev/be-02/login-logout

[BE-02] - Login and Logout

Author: AfandyW

app/middlewares/auth_middleware.go

@@ -31,15 +31,24 @@ func (m *Middleware) AuthMiddleware(allowedRole string) domain.MiddlewareFunc {
 				return
 			}
 
-			// tokenLogoutErr := m.UserRepo.ExpiredToken(request.Context(), *token)
-			// if tokenLogoutErr == nil {
-			// 	utils.Response(domain.HttpResponse{
-			// 		Code:    401,
-			// 		Message: "Token expired",
-			// 		Data:    nil,
-			// 	}, writer)
-			// 	return
-			// }
+			logoutToken, err := m.UserRepo.GetToken(request.Context(), *token)
+			if err != nil {
+				utils.Response(domain.HttpResponse{
+					Code:    401,
+					Message: "Unauthorized",
+					Data:    nil,
+				}, writer)
+				return
+			}
+			if logoutToken.Status == 0 {
+				utils.Response(domain.HttpResponse{
+					Code:    401,
+					Message: "Unauthorized",
+					Data:    nil,
+				}, writer)
+				return
+			}
+
 
 			user, err := m.UserRepo.FindByEmail(request.Context(), verifyToken.Email)
 			if err != nil {

app/users/delivery/http/logout_users.go

@@ -22,11 +22,8 @@ func (h Handler) Logout(w http.ResponseWriter, r *http.Request) {
 
 	err := h.usecase.Logout(r.Context(), *token)
 	if err != nil {
-		utils.Response(domain.HttpResponse{
-			Code:    500,
-			Message: err.Error(),
-			Data:    nil,
-		}, w)
+		resp := utils.CostumErr(err.Error())
+		utils.Response(resp, w)
 		return
 	}
 

app/users/repository/cleanup_logout_token.go

@@ -0,0 +1,17 @@
+package repository
+
+import (
+	"context"
+	"time"
+
+	"github.com/hammer-code/lms-be/domain"
+)
+
+func (repo *repository) CleanupLogoutToken(ctx context.Context) error {
+	token := &domain.LogoutToken{}
+	if err := repo.db.DB(ctx).Delete(token, "expired_at < ?", time.Now()).Error; err != nil {
+		return err
+	}
+
+	return nil
+}

app/users/repository/expired_token.go

@@ -0,0 +1,14 @@
+package repository
+
+import (
+	"context"
+
+	"github.com/hammer-code/lms-be/domain"
+)
+
+func (repo *repository) GetToken(ctx context.Context, token string) (logoutToken domain.LogoutToken, err error) {
+	if err = repo.db.DB(ctx).Find(&logoutToken, "token = ?", token).Error; err != nil {
+		return
+	}
+	return
+}

app/users/repository/get_token.go

@@ -2,18 +2,13 @@ package repository
 
 import (
 	"context"
-	"github.com/hammer-code/lms-be/domain"
 	"time"
+
+	"github.com/hammer-code/lms-be/domain"
 )
 
 func (repo *repository) LogoutUser(ctx context.Context, token string, expiredAt time.Time) error {
-	err := repo.db.DB(ctx).Create(&domain.LogoutToken{
-		Token:     token,
-		ExpiredAt: expiredAt,
-		CreatedAt: time.Now(),
-	}).Error
-
-	if err != nil {
+	if err := repo.db.DB(ctx).Model(&domain.LogoutToken{}).Where("token = ?", token).Update("status", 0).Error; err != nil {
 		return err
 	}
 

app/users/repository/logout_users.go

@@ -0,0 +1,24 @@
+package repository
+
+import (
+	"context"
+	"time"
+
+	"github.com/hammer-code/lms-be/domain"
+)
+
+func (repo *repository) StoreToken(ctx context.Context, token string, expiredAt time.Time, uid int) error {
+	err := repo.db.DB(ctx).Create(&domain.LogoutToken{
+		Token:     token,
+		ExpiredAt: expiredAt,
+		CreatedAt: time.Now(),
+		UserId:    uid,
+		Status:    1,
+	}).Error
+
+	if err != nil {
+		return err
+	}
+
+	return nil
+}

app/users/repository/store_token.go

@@ -0,0 +1,15 @@
+package repository
+
+import (
+	"context"
+
+	"github.com/hammer-code/lms-be/domain"
+)
+
+func (repo *repository) UnactivateTokenByUser(ctx context.Context, uid int) error {
+	if err := repo.db.DB(ctx).Model(&domain.LogoutToken{}).Where("user_id = ? AND status = 1", uid).Update("status", 0).Error; err != nil {
+		return err
+	}
+
+	return nil
+}

app/users/repository/unactivate_token.go

@@ -28,7 +28,7 @@ func (us *usecase) ForgotPassword(ctx context.Context, emailForgot domain.Forgot
 		return
 	}
 
-	resetToken, err := us.jwt.GenerateAccessToken(ctx, &user, 30)
+	resetToken, _, err := us.jwt.GenerateAccessToken(ctx, &user, 30)
 	if err != nil {
 		logrus.Error("us.ForgotPassword: failed to generate token", err)
 		return

app/users/usecase/forgot_password.go

@@ -2,6 +2,7 @@ package usecase
 
 import (
 	"context"
+
 	"github.com/hammer-code/lms-be/domain"
 	"github.com/sirupsen/logrus"
 	"golang.org/x/crypto/bcrypt"
@@ -14,24 +15,37 @@ func (us *usecase) Login(ctx context.Context, userReq domain.Login) (user domain
 			logrus.Error("us.LoginUser: failed to login", err)
 			return err
 		}
-		return nil
-	})
+	
+		if err = bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(userReq.Password)); err != nil {
+			logrus.Error("us.Login: invalid password")
+			return err
+		}
+	
+		
+		tokenPtr, expiredTime, err := us.jwt.GenerateAccessToken(ctx, &user, 60)
+		token = *tokenPtr
+		
+		if err != nil {
+			logrus.Error("us.Login: failed to login. ", err)
+			return err
+		}
 
-	if err = bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(userReq.Password)); err != nil {
-		logrus.Error("us.Login: invalid password")
-		return
-	}
+		if err = us.userRepo.UnactivateTokenByUser(ctx, user.ID); err != nil {
+			logrus.Error("us.Login: failed to login. ", err)
+			return err
+		}
+		if err = us.userRepo.StoreToken(ctx, token, expiredTime, user.ID); err != nil {
+			logrus.Error("us.Login: failed to login. ", err)
+			return err
+		}
 
-	if err != nil {
-		logrus.Error("us.Login: failed to login. ", err)
-		return
-	}
+		return nil
+	})
 
-	signToken, err := us.jwt.GenerateAccessToken(ctx, &user, 60)
 	if err != nil {
 		logrus.Error("us.Login: failed to login. ", err)
 		return
 	}
 
-	return user, *signToken, nil
+	return user, token, nil
 }