user-revoke.go

package main

import (
	"log"
	"net/http"

	"github.com/mdmdj/bootdev-chirpy/internal/auth"
	"github.com/mdmdj/bootdev-chirpy/internal/database"
)

func revokeRoute(w http.ResponseWriter, r *http.Request) {
	refreshToken, err := auth.GetBearerToken(r.Header)
	if err != nil {
		log.Printf("revokeRoute, bad bearer token header: %s", err)
		respondWithError(w, http.StatusBadRequest, "Something went wrong")
		return
	}

	dbUser, err := cfg.db.GetUserFromRefreshToken(r.Context(), refreshToken)
	if err != nil {
		log.Printf("revokeRoute, token not found: %s %s", refreshToken, err)
		respondWithError(w, http.StatusUnauthorized, "Something went wrong")
		return
	}

	err = cfg.db.RevokeTokenByTokenAndUser(r.Context(), database.RevokeTokenByTokenAndUserParams{
		Token:  refreshToken,
		UserID: dbUser.ID,
	})

	if err != nil {
		log.Printf("revokeRoute, error revoking token: %s", err)
		respondWithError(w, http.StatusUnauthorized, "Something went wrong")
		return
	}

	w.WriteHeader(http.StatusNoContent)
}