ai slop ah

2026-08-22 17:27:55 +02:00
parent 6a5bb1d699
commit dc124d0d77
64 changed files with 7308 additions and 2448 deletions
@@ -5,6 +5,8 @@ import (
 	"errors"
 	"net/http"
 	"strings"
+
+	"github.com/gin-gonic/gin"
 )

 type Handler struct {
@@ -15,11 +17,16 @@ func NewHandler(service *Service) *Handler {
 	return &Handler{service: service}
 }

-func (h *Handler) RegisterRoutes(mux *http.ServeMux) {
-	mux.HandleFunc("POST /api/auth/register", h.Register)
-	mux.HandleFunc("POST /api/auth/login", h.Login)
-	mux.HandleFunc("POST /api/auth/logout", h.Logout)
-	mux.HandleFunc("GET /api/auth/me", h.Me)
+func (h *Handler) RegisterRoutes(router gin.IRouter) {
+	router.POST("/api/auth/register", h.Register)
+	router.POST("/api/auth/login", h.Login)
+	router.POST("/api/auth/logout", h.Logout)
+	router.GET("/api/auth/me", h.Me)
+}
+
+func (h *Handler) RegisterProtectedRoutes(router gin.IRouter, require gin.HandlerFunc) {
+	router.PATCH("/api/auth/me", require, h.UpdateMe)
+	router.POST("/api/auth/password", require, h.ChangePassword)
 }

 type credentialsRequest struct {
@@ -28,66 +35,188 @@ type credentialsRequest struct {
 	Name     string `json:"name"`
 }

-func (h *Handler) Register(w http.ResponseWriter, r *http.Request) {
+type profileRequest struct {
+	Email string `json:"email"`
+	Name  string `json:"name"`
+}
+
+type passwordRequest struct {
+	CurrentPassword string `json:"currentPassword"`
+	NewPassword     string `json:"newPassword"`
+}
+
+// Register godoc
+// @Summary Register a photographer account
+// @Tags authentication
+// @Accept json
+// @Produce json
+// @Param request body credentialsRequest true "Account details"
+// @Success 201 {object} map[string]interface{}
+// @Failure 400 {object} map[string]string
+// @Failure 409 {object} map[string]string
+// @Router /api/auth/register [post]
+func (h *Handler) Register(c *gin.Context) {
 	var request credentialsRequest
-	if !decodeJSON(w, r, &request) {
+	if !decodeJSON(c, &request) {
 		return
 	}
-	user, err := h.service.Register(r.Context(), request.Email, request.Password, request.Name)
+	user, err := h.service.Register(c.Request.Context(), request.Email, request.Password, request.Name)
 	if err != nil {
 		if errors.Is(err, ErrEmailTaken) {
-			writeJSON(w, http.StatusConflict, map[string]string{"error": "email is already registered"})
+			writeJSON(c, http.StatusConflict, map[string]string{"error": "email is already registered"})
 			return
 		}
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+		writeJSON(c, http.StatusBadRequest, map[string]string{"error": err.Error()})
 		return
 	}
-	h.service.SetSession(w, user)
-	writeJSON(w, http.StatusCreated, map[string]User{"user": user})
+	h.service.SetSession(c, user)
+	writeJSON(c, http.StatusCreated, map[string]User{"user": user})
 }

-func (h *Handler) Login(w http.ResponseWriter, r *http.Request) {
+// Login godoc
+// @Summary Sign in a photographer
+// @Tags authentication
+// @Accept json
+// @Produce json
+// @Param request body credentialsRequest true "Account credentials"
+// @Success 200 {object} map[string]interface{}
+// @Failure 400 {object} map[string]string
+// @Failure 401 {object} map[string]string
+// @Router /api/auth/login [post]
+func (h *Handler) Login(c *gin.Context) {
 	var request credentialsRequest
-	if !decodeJSON(w, r, &request) {
+	if !decodeJSON(c, &request) {
 		return
 	}
-	user, err := h.service.Login(r.Context(), request.Email, request.Password)
+	user, err := h.service.Login(c.Request.Context(), request.Email, request.Password)
 	if err != nil {
 		if errors.Is(err, ErrInvalidCredentials) {
-			writeJSON(w, http.StatusUnauthorized, map[string]string{"error": "invalid email or password"})
+			writeJSON(c, http.StatusUnauthorized, map[string]string{"error": "invalid email or password"})
 			return
 		}
-		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": "could not sign in"})
+		writeJSON(c, http.StatusInternalServerError, map[string]string{"error": "could not sign in"})
 		return
 	}
-	h.service.SetSession(w, user)
-	writeJSON(w, http.StatusOK, map[string]User{"user": user})
+	h.service.SetSession(c, user)
+	writeJSON(c, http.StatusOK, map[string]User{"user": user})
 }

-func (h *Handler) Logout(w http.ResponseWriter, _ *http.Request) {
-	h.service.ClearSession(w)
-	writeJSON(w, http.StatusOK, map[string]string{"status": "ok"})
+// Logout godoc
+// @Summary Sign out the current photographer
+// @Tags authentication
+// @Produce json
+// @Success 200 {object} map[string]string
+// @Router /api/auth/logout [post]
+func (h *Handler) Logout(c *gin.Context) {
+	h.service.ClearSession(c)
+	writeJSON(c, http.StatusOK, map[string]string{"status": "ok"})
 }

-func (h *Handler) Me(w http.ResponseWriter, r *http.Request) {
-	user, err := h.service.UserFromRequest(r.Context(), r)
+// Me godoc
+// @Summary Get the current photographer
+// @Tags authentication
+// @Produce json
+// @Security studioSession
+// @Success 200 {object} map[string]interface{}
+// @Failure 401 {object} map[string]string
+// @Router /api/auth/me [get]
+func (h *Handler) Me(c *gin.Context) {
+	user, err := h.service.UserFromRequest(c.Request.Context(), c.Request)
 	if err != nil {
-		writeJSON(w, http.StatusUnauthorized, map[string]string{"error": "authentication required"})
+		writeJSON(c, http.StatusUnauthorized, map[string]string{"error": "authentication required"})
 		return
 	}
-	writeJSON(w, http.StatusOK, map[string]User{"user": user})
+	writeJSON(c, http.StatusOK, map[string]User{"user": user})
 }

-func decodeJSON(w http.ResponseWriter, r *http.Request, target any) bool {
-	if !strings.HasPrefix(r.Header.Get("Content-Type"), "application/json") {
-		writeJSON(w, http.StatusUnsupportedMediaType, map[string]string{"error": "content type must be application/json"})
+// UpdateMe godoc
+// @Summary Update the current photographer profile
+// @Tags authentication
+// @Accept json
+// @Produce json
+// @Security studioSession
+// @Param request body profileRequest true "Profile details"
+// @Success 200 {object} map[string]interface{}
+// @Failure 400 {object} map[string]string
+// @Failure 401 {object} map[string]string
+// @Failure 409 {object} map[string]string
+// @Router /api/auth/me [patch]
+func (h *Handler) UpdateMe(c *gin.Context) {
+	user, ok := UserFromContext(c)
+	if !ok {
+		writeJSON(c, http.StatusUnauthorized, map[string]string{"error": "authentication required"})
+		return
+	}
+	var request profileRequest
+	if !decodeJSON(c, &request) {
+		return
+	}
+	updated, err := h.service.UpdateProfile(c.Request.Context(), user.ID, request.Email, request.Name)
+	if err != nil {
+		if errors.Is(err, ErrEmailTaken) {
+			writeJSON(c, http.StatusConflict, map[string]string{"error": "email is already registered"})
+			return
+		}
+		if strings.HasPrefix(err.Error(), "enter ") || strings.HasPrefix(err.Error(), "name ") {
+			writeJSON(c, http.StatusBadRequest, map[string]string{"error": err.Error()})
+			return
+		}
+		writeJSON(c, http.StatusInternalServerError, map[string]string{"error": "could not update profile"})
+		return
+	}
+	writeJSON(c, http.StatusOK, map[string]User{"user": updated})
+}
+
+// ChangePassword godoc
+// @Summary Change the current photographer password
+// @Tags authentication
+// @Accept json
+// @Produce json
+// @Security studioSession
+// @Param request body passwordRequest true "Password details"
+// @Success 200 {object} map[string]string
+// @Failure 400 {object} map[string]string
+// @Failure 401 {object} map[string]string
+// @Router /api/auth/password [post]
+func (h *Handler) ChangePassword(c *gin.Context) {
+	user, ok := UserFromContext(c)
+	if !ok {
+		writeJSON(c, http.StatusUnauthorized, map[string]string{"error": "authentication required"})
+		return
+	}
+	var request passwordRequest
+	if !decodeJSON(c, &request) {
+		return
+	}
+	if err := h.service.ChangePassword(c.Request.Context(), user.ID, request.CurrentPassword, request.NewPassword); err != nil {
+		if errors.Is(err, ErrCurrentPassword) {
+			writeJSON(c, http.StatusBadRequest, map[string]string{"error": "current password is incorrect"})
+			return
+		}
+		if strings.HasPrefix(err.Error(), "new password") {
+			writeJSON(c, http.StatusBadRequest, map[string]string{"error": err.Error()})
+			return
+		}
+		writeJSON(c, http.StatusInternalServerError, map[string]string{"error": "could not update password"})
+		return
+	}
+	writeJSON(c, http.StatusOK, map[string]string{"status": "ok"})
+}
+
+func decodeJSON(c *gin.Context, target any) bool {
+	if !strings.HasPrefix(c.GetHeader("Content-Type"), "application/json") {
+		writeJSON(c, http.StatusUnsupportedMediaType, map[string]string{"error": "content type must be application/json"})
 		return false
 	}
-	decoder := json.NewDecoder(http.MaxBytesReader(w, r.Body, 1<<20))
+	decoder := json.NewDecoder(http.MaxBytesReader(c.Writer, c.Request.Body, 1<<20))
 	decoder.DisallowUnknownFields()
 	if err := decoder.Decode(target); err != nil {
-		writeJSON(w, http.StatusBadRequest, map[string]string{"error": "invalid JSON body"})
+		writeJSON(c, http.StatusBadRequest, map[string]string{"error": "invalid JSON body"})
 		return false
 	}
 	return true
 }
+
+func writeJSON(c *gin.Context, status int, value any) {
+	c.JSON(status, value)
+}