this repo has no description
auth: add route to change password
+52
-2
+1
backend/cmd/api/main.go
+1
backend/cmd/api/main.go
+17
backend/internal/handlers/auth.go
+17
backend/internal/handlers/auth.go
···
46
46
w.Write([]byte(email))
47
47
w.WriteHeader(http.StatusOK)
48
48
}
49
+
50
+
func (h *AuthHandler) ChangePassword(w http.ResponseWriter, r *http.Request) {
51
+
userID := middlewares.GetUserID(r.Context())
52
+
var req models.ChangePasswordRequest
53
+
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
54
+
http.Error(w, err.Error(), http.StatusBadRequest)
55
+
return
56
+
}
57
+
58
+
err := h.svc.ChangePassword(r.Context(), userID, req)
59
+
if err != nil {
60
+
http.Error(w, err.Error(), http.StatusInternalServerError)
61
+
return
62
+
}
63
+
64
+
w.WriteHeader(http.StatusOK)
65
+
}
+4
backend/internal/models/auth.go
+4
backend/internal/models/auth.go
+13
backend/internal/services/auth.go
+13
backend/internal/services/auth.go
···
49
49
50
50
return user.Email, nil
51
51
}
52
+
53
+
func (s *AuthService) ChangePassword(context context.Context, userId string, req models.ChangePasswordRequest) error {
54
+
user, err := s.user.GetFromID(userId)
55
+
if err != nil {
56
+
return err
57
+
}
58
+
59
+
if err := s.user.UpdatePassword(user, req.NewPassword); err != nil {
60
+
return err
61
+
}
62
+
63
+
return nil
64
+
}
+16
-2
backend/internal/services/user.go
+16
-2
backend/internal/services/user.go
···
18
18
19
19
// get a user by its email
20
20
func (s *UserService) GetFromEmail(email string) (*models.User, error) {
21
-
row := s.db.QueryRow("select * from \"user\" where email = ?", email)
21
+
row := s.db.QueryRow("select * from \"users\" where email = ?", email)
22
22
var user models.User
23
23
if err := row.Scan(&user.ID, &user.Email, &user.PasswordHash); err != nil {
24
24
return nil, err
···
41
41
}
42
42
43
43
func (s *UserService) GetFromID(userId string) (*models.User, error) {
44
-
row := s.db.QueryRow("select * from \"user\" where id = ?", userId)
44
+
row := s.db.QueryRow("select * from \"users\" where id = ?", userId)
45
45
var user models.User
46
46
if err := row.Scan(&user.ID, &user.Email, &user.PasswordHash); err != nil {
47
47
return nil, err
48
48
}
49
49
return &user, nil
50
50
}
51
+
52
+
func (s *UserService) UpdatePassword(user *models.User, newPassword string) error {
53
+
hashedPassword, err := bcrypt.GenerateFromPassword([]byte(newPassword), bcrypt.DefaultCost)
54
+
if err != nil {
55
+
return err
56
+
}
57
+
58
+
_, err = s.db.Exec("update \"users\" set password_hash = ? where id = ?", hashedPassword, user.ID)
59
+
if err != nil {
60
+
return err
61
+
}
62
+
63
+
return nil
64
+
}
+1
backend/migrations/20250205_passwd_hash.sql
+1
backend/migrations/20250205_passwd_hash.sql
···
1
+
alter table users rename column password to password_hash;