feat: add token expiration handling and update login request validation

Author: aspirantzhang

contexts/Authorization/Application/Coordinators/AuthenticationCoordinator.php

@@ -5,6 +5,7 @@
 namespace Contexts\Authorization\Application\Coordinators;
 
 use Contexts\Authorization\Application\DTOs\Authentication\LoginDTO;
+use Contexts\Authorization\Domain\Policies\TokenExpirationPolicy;
 use Contexts\Authorization\Domain\Repositories\UserRepository;
 use Contexts\Shared\Application\BaseCoordinator;
 
@@ -19,7 +20,8 @@ public function login(LoginDTO $dto)
         $user = $this->userRepository->getByEmailOrThrowAuthFailure($dto->email);
         $user->authenticate($dto->password);
 
-        $token = $this->userRepository->generateLoginToken($user);
+        $expiresAt = TokenExpirationPolicy::resolveExpiration($dto->remember);
+        $token = $this->userRepository->generateLoginToken($user, $expiresAt);
 
         $this->dispatchDomainEvents($user);
 

contexts/Authorization/Application/DTOs/Authentication/LoginDTO.php

@@ -9,13 +9,15 @@ class LoginDTO
     public function __construct(
         public readonly string $email,
         public readonly string $password,
+        public readonly bool $remember,
     ) {}
 
     public static function fromRequest(array $data): self
     {
         return new self(
             $data['email'],
             $data['password'],
+            $data['remember'] ?? false,
         );
     }
 }

contexts/Authorization/Domain/Policies/TokenExpirationPolicy.php

@@ -0,0 +1,17 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Contexts\Authorization\Domain\Policies;
+
+use Carbon\CarbonImmutable;
+
+class TokenExpirationPolicy
+{
+    public static function resolveExpiration(bool $remember): CarbonImmutable
+    {
+        return $remember ?
+            CarbonImmutable::now()->addWeeks(2) :
+            CarbonImmutable::now()->addDay();
+    }
+}

contexts/Authorization/Presentation/Requests/Authentication/LoginRequest.php

@@ -13,6 +13,7 @@ public function rules(): array
         return [
             'email' => ['required', 'email', 'max:255'],
             'password' => ['required', 'string', 'max:255'],
+            'remember' => ['boolean'],
         ];
     }
 }