feat: activity log backend foundation

internal/infrastructure/useCases/ResetPassword.go

@@ -2,8 +2,10 @@ package useCases
 
 import (
 	"RenewCMS/internal/domain/apikey"
+	"RenewCMS/internal/domain/audit"
 	"RenewCMS/internal/domain/hash"
 	"RenewCMS/internal/domain/user"
+	"context"
 	"time"
 )
 
@@ -12,13 +14,14 @@ type ResetPasswordUseCase struct {
 	hasher         hash.Hasher
 	apiKeys        apikey.Repository
 	now            func() time.Time
+	recorder       audit.Recorder
 }
 
-func NewResetPasswordUseCase(userRepository user.Repository, hasher hash.Hasher, apiKeys apikey.Repository, now func() time.Time) *ResetPasswordUseCase {
-	return &ResetPasswordUseCase{userRepository, hasher, apiKeys, now}
+func NewResetPasswordUseCase(userRepository user.Repository, hasher hash.Hasher, apiKeys apikey.Repository, now func() time.Time, recorder audit.Recorder) *ResetPasswordUseCase {
+	return &ResetPasswordUseCase{userRepository, hasher, apiKeys, now, recorder}
 }
 
-func (r *ResetPasswordUseCase) ResetPassword(email string, code string, newPassword string) error {
+func (r *ResetPasswordUseCase) ResetPassword(ctx context.Context, email string, code string, newPassword string) error {
 	dbUser, err := r.userRepository.GetByEmail(email)
 	if err != nil {
 		return user.ErrInvalidPasswordResetCode
@@ -41,5 +44,13 @@ func (r *ResetPasswordUseCase) ResetPassword(email string, code string, newPassw
 		return err
 	}
 
-	return r.apiKeys.RevokeAllByUser(dbUser.ID, r.now())
+	if err := r.apiKeys.RevokeAllByUser(dbUser.ID, r.now()); err != nil {
+		return err
+	}
+
+	event := audit.NewEvent(audit.ActionPasswordResetDone, audit.CategoryAuth)
+	event.Actor = audit.UserActor(dbUser)
+	event.Security = true
+	r.recorder.Record(ctx, event)
+	return nil
 }