Add auth endpoints and user migrations

Author: simondanielsson

cmd/internal/queries/models.go

@@ -30,6 +30,8 @@ func RegisterRoutes(mux *http.ServeMux, logger logging.Logger) {
 	mux.Handle("DELETE /api/v1/recitals/{id}", deleteRecitalHandler(logger))
 	mux.Handle("GET /api/v1/recitals/{id}/listen", mainpageHandler(logger))
 	mux.Handle("GET /api/v1/recitals/{id}/audio", streamRecitalAudioHandler(logger))
+	mux.Handle("POST /api/v1/users", createUserHandler(logger))
+	mux.Handle("GET /api/v1/auth", loginUserHandler(logger))
 }
 
 func mainpageHandler(logger logging.Logger) http.Handler {

cmd/internal/queries/query.sql.go

@@ -0,0 +1,86 @@
+package routes
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"time"
+
+	"github.com/jackc/pgx/v5/pgtype"
+	constants "github.com/simondanielsson/recite/cmd/internal"
+	"github.com/simondanielsson/recite/cmd/internal/logging"
+	"github.com/simondanielsson/recite/cmd/internal/queries"
+	"github.com/simondanielsson/recite/cmd/internal/utils"
+)
+
+func createUserHandler(logger logging.Logger) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		email := r.FormValue("email")
+		password := r.FormValue("password")
+
+		ctx := r.Context()
+
+		passwordHash, err := utils.HashPassword(password)
+		if err != nil {
+			respondWithOpaqueMessage(ctx, w, r, err, logger)
+			return
+		}
+
+		repository, ok := ctx.Value(constants.RepositoryKey).(*queries.Queries)
+		if !ok {
+			respondWithOpaqueMessage(ctx, w, r, fmt.Errorf("failed loading repository"), logger)
+			return
+		}
+
+		userArgs := queries.CreateUserParams{
+			Email:        email,
+			PasswordHash: passwordHash,
+			CreatedAt:    pgtype.Date{Time: time.Now(), InfinityModifier: pgtype.Finite, Valid: true},
+		}
+		_, err = repository.CreateUser(ctx, userArgs)
+		if err != nil {
+			repondWithErrorMessage(w, r, "Failed creating user", http.StatusInternalServerError, logger)
+			return
+		}
+
+		status := http.StatusOK
+		w.WriteHeader(status)
+		// A bit hacky way towrite override the existing context
+		ctx = context.WithValue(ctx, constants.StatusCodeKey, status)
+		*r = *(r.WithContext(ctx))
+	})
+}
+
+func loginUserHandler(logger logging.Logger) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		ctx := r.Context()
+		repository, ok := ctx.Value(constants.RepositoryKey).(*queries.Queries)
+		if !ok {
+			respondWithOpaqueMessage(ctx, w, r, fmt.Errorf("failed loading repository"), logger)
+			return
+		}
+
+		email, password, ok := r.BasicAuth()
+		if !ok {
+			repondWithErrorMessage(w, r, "could not get credentials", http.StatusBadRequest, logger)
+			return
+		}
+
+		user, err := repository.GetUser(ctx, email)
+		if err != nil {
+			message := fmt.Sprintf("User with email %s not found", email)
+			repondWithErrorMessage(w, r, message, http.StatusNotFound, logger)
+			return
+		}
+		if err := utils.ValidatePassword(password, user.PasswordHash); err != nil {
+			repondWithErrorMessage(w, r, "Incorrect password", http.StatusBadRequest, logger)
+			return
+		}
+
+		status := http.StatusOK
+		w.WriteHeader(status)
+		// A bit hacky way towrite override the existing context
+		ctx = context.WithValue(ctx, constants.StatusCodeKey, status)
+		*r = *(r.WithContext(ctx))
+	})
+}

cmd/internal/routes/routes.go

@@ -5,6 +5,7 @@ import (
 	"net/http"
 
 	"github.com/jackc/pgx/v5/pgxpool"
+	"github.com/rs/cors"
 	"github.com/simondanielsson/recite/cmd/internal/config"
 	"github.com/simondanielsson/recite/cmd/internal/db"
 	"github.com/simondanielsson/recite/cmd/internal/logging"
@@ -23,6 +24,7 @@ func New(config config.Config, DB *pgxpool.Pool, logger logging.Logger) App {
 	var handler http.Handler = mux
 	handler = logging.AddLoggingMiddleware(handler, logger)
 	handler = db.AddDatabaseMiddleware(handler, DB, logger)
+	handler = cors.AllowAll().Handler(handler)
 
 	return App{
 		Server: http.Server{

cmd/internal/routes/user_routes.go

@@ -0,0 +1,53 @@
+package utils
+
+import (
+	"time"
+
+	"github.com/golang-jwt/jwt"
+)
+
+type JWTClaims struct {
+	UserID uint `json:"user_id"`
+	jwt.StandardClaims
+}
+
+var jwtKey []byte
+
+func SetJWTKey(key string) {
+	jwtKey = []byte(key)
+}
+
+// CreateJWTToken creates a JWT token with the given user ID
+func CreateJWTToken(userID uint) (string, error) {
+	expirationTime := time.Now().Add(1 * time.Hour)
+	claims := &JWTClaims{
+		UserID: userID,
+		StandardClaims: jwt.StandardClaims{
+			ExpiresAt: expirationTime.Unix(),
+		},
+	}
+
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	token_string, err := token.SignedString(jwtKey)
+	if err != nil {
+		return "", err
+	}
+
+	return token_string, nil
+}
+
+// ParseJWTToken parses a JWT token and returns the claims
+func ParseJWTToken(token string) (*JWTClaims, error) {
+	claims := &JWTClaims{}
+	tkn, err := jwt.ParseWithClaims(token, claims, func(token *jwt.Token) (any, error) {
+		return jwtKey, nil
+	})
+	if err != nil {
+		return nil, err
+	}
+	if !tkn.Valid {
+		return nil, err
+	}
+
+	return claims, nil
+}

cmd/internal/server/server.go

@@ -0,0 +1,15 @@
+package utils
+
+import "golang.org/x/crypto/bcrypt"
+
+func HashPassword(password string) (string, error) {
+	hashedPassword, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+	if err != nil {
+		return "", err
+	}
+	return string(hashedPassword), nil
+}
+
+func ValidatePassword(password, hashedPassword string) error {
+	return bcrypt.CompareHashAndPassword([]byte(hashedPassword), []byte(password))
+}

cmd/internal/utils/jwt.go

@@ -0,0 +1,10 @@
+-- migrate:up
+CREATE TABLE users (
+  id SERIAL PRIMARY KEY,
+  email TEXT NOT NULL,
+  password_hash TEXT NOT NULL,
+  created_at DATE NOT NULL
+);
+
+-- migrate:down
+DROP TABLE users;

cmd/internal/utils/password.go

@@ -22,3 +22,11 @@ RETURNING *;
 -- name: DeleteRecital :exec
 DELETE FROM recitals WHERE id = $1
 RETURNING *;
+
+-- name: GetUser :one
+SELECT * FROM users WHERE email = $1;
+
+-- name: CreateUser :one
+INSERT INTO users (email, password_hash, created_at)
+VALUES ($1, $2, $3)
+RETURNING *;

db/migrations/20250828135954_create_users_table.sql

@@ -14,13 +14,15 @@ require (
 require (
 	github.com/andybalholm/cascadia v1.3.3 // indirect
 	github.com/ebitengine/purego v0.8.0 // indirect
+	github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
 	github.com/goph/emperror v0.17.1 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
 	github.com/jackc/pgx/v5 v5.7.5 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
 	github.com/konsorten/go-windows-terminal-sequences v1.0.1 // indirect
 	github.com/pkg/errors v0.8.1 // indirect
+	github.com/rs/cors v1.11.1 // indirect
 	github.com/sirupsen/logrus v1.3.0 // indirect
 	github.com/tidwall/gjson v1.14.4 // indirect
 	github.com/tidwall/match v1.1.1 // indirect