chore(auth): start refactoring for testable code #181

handler/auth.go

@@ -2,12 +2,22 @@ package handler
 
 import (
 	"me-fit/service"
+	"me-fit/utils"
 
 	"database/sql"
 	"net/http"
 )
 
+type AuthHandler struct {
+	db      *sql.DB
+	service *service.AuthService
+}
+
 func handleAuth(db *sql.DB, router *http.ServeMux) {
+	a := AuthHandler{
+		db:      db,
+		service: service.NewAuthService(db),
+	}
 	// Don't use auth middleware for these routes, as it makes redirecting very difficult, if the mail is not yet verified
 	router.Handle("/auth/signin", service.HandleSignInPage(db))
 	router.Handle("/auth/signup", service.HandleSignUpPage(db))
@@ -17,7 +27,7 @@ func handleAuth(db *sql.DB, router *http.ServeMux) {
 	router.Handle("/auth/change-password", service.HandleChangePasswordPage(db))
 	router.Handle("/auth/reset-password", service.HandleResetPasswordPage(db))
 	router.Handle("/api/auth/signup", service.HandleSignUpComp(db))
-	router.Handle("/api/auth/signin", service.HandleSignInComp(db))
+	router.Handle("/api/auth/signin", a.handleSignIn())
 	router.Handle("/api/auth/signout", service.HandleSignOutComp(db))
 	router.Handle("/api/auth/delete-account", service.HandleDeleteAccountComp(db))
 	router.Handle("/api/auth/verify-resend", service.HandleVerifyResendComp(db))
@@ -25,3 +35,27 @@ func handleAuth(db *sql.DB, router *http.ServeMux) {
 	router.Handle("/api/auth/reset-password", service.HandleResetPasswordComp(db))
 	router.Handle("/api/auth/reset-password-actual", service.HandleActualResetPasswordComp(db))
 }
+
+func (a AuthHandler) handleSignIn() http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		var email = r.FormValue("email")
+		var password = r.FormValue("password")
+
+		user := a.service.SignIn(email, password)
+
+		if user != nil {
+			result := service.TryCreateSessionAndSetCookie(r, w, a.db, user.Id)
+			if !result {
+				return
+			}
+
+			if !user.EmailVerified {
+				utils.DoRedirect(w, r, "/auth/verify")
+			} else {
+				utils.DoRedirect(w, r, "/")
+			}
+		} else {
+			http.Error(w, "Invalid email or password", http.StatusUnauthorized)
+		}
+	}
+}