refac: split the auth handler into registration and login, account verification, and password reset handlers, each with its own dependencies

test/runtime_settings_injection_http_test.go

@@ -36,21 +36,15 @@ func newSecureCookieAuthRouter(t *testing.T, isProduction bool) (*chi.Mux, *mock
 	}
 	userRepo.users[1] = domainUser.User{ID: 1, Username: "alice", Password: hashed, IsVerified: true}
 
-	authHandler := auth.NewHandler(
+	loginHandler := auth.NewLoginHandler(
 		token,
-		useCases.NewGetUserUseCase(userRepo),
-		useCases.NewListUsersUseCase(userRepo),
 		useCases.NewCreateUserUseCase(userRepo, hasher, newMockMailRepo(), "https://cms.example.com"),
 		useCases.NewAuthenticateUserUseCase(userRepo, hasher),
-		useCases.NewVerifyUserUseCase(userRepo, hasher),
-		useCases.NewCancelRegistrationUseCase(userRepo),
-		useCases.NewRequestPasswordResetUseCase(userRepo, hasher, newMockMailRepo(), "https://cms.example.com"),
-		useCases.NewResetPasswordUseCase(userRepo, hasher),
 		isProduction,
 	)
 
 	r := chi.NewRouter()
-	r.Post("/login", authHandler.Login)
+	r.Post("/login", loginHandler.Login)
 	return r, userRepo
 }