refac: password and code hashing & checking go through a domain hasher interface used by the use cases instead of bcrypt in the user repository and the auth handler

api/handlers/auth/authHandler.go

@@ -3,7 +3,6 @@ package auth
 import (
 	"RenewCMS/api/pkg/apperr"
 	validator "RenewCMS/api/pkg/validator"
-	"RenewCMS/internal/domain/user"
 	"RenewCMS/internal/infrastructure/useCases"
 	"encoding/json"
 	"net/http"
@@ -11,14 +10,14 @@ import (
 	"time"
 
 	"github.com/go-chi/jwtauth/v5"
-	"golang.org/x/crypto/bcrypt"
 )
 
 type Handler struct {
-	Token         *jwtauth.JWTAuth
-	GetUseCase    *useCases.GetUserUseCase
-	ListUseCase   *useCases.ListUsersUseCase
-	CreateUseCase *useCases.CreateUserUseCase
+	Token               *jwtauth.JWTAuth
+	GetUseCase          *useCases.GetUserUseCase
+	ListUseCase         *useCases.ListUsersUseCase
+	CreateUseCase       *useCases.CreateUserUseCase
+	AuthenticateUseCase *useCases.AuthenticateUserUseCase
 }
 
 type RegisterCredentials struct {
@@ -48,12 +47,13 @@ func removeJwtCookie(w http.ResponseWriter) {
 	})
 }
 
-func NewHandler(token *jwtauth.JWTAuth, get *useCases.GetUserUseCase, list *useCases.ListUsersUseCase, create *useCases.CreateUserUseCase) *Handler {
+func NewHandler(token *jwtauth.JWTAuth, get *useCases.GetUserUseCase, list *useCases.ListUsersUseCase, create *useCases.CreateUserUseCase, authenticate *useCases.AuthenticateUserUseCase) *Handler {
 	return &Handler{
-		Token:         token,
-		GetUseCase:    get,
-		ListUseCase:   list,
-		CreateUseCase: create,
+		Token:               token,
+		GetUseCase:          get,
+		ListUseCase:         list,
+		CreateUseCase:       create,
+		AuthenticateUseCase: authenticate,
 	}
 }
 
@@ -113,20 +113,6 @@ func (h *Handler) IsVerified(r *http.Request) bool {
 	return currentUser.IsVerified
 }
 
-func (h *Handler) GetUserFromCredentials(credentials LoginCredentials) (user.User, error) {
-	dbUser, err := h.GetUseCase.GetUserByUsername(credentials.Username)
-	if err != nil {
-		return user.User{}, err
-	}
-
-	err = bcrypt.CompareHashAndPassword([]byte(dbUser.Password), []byte(credentials.Password))
-	if err != nil {
-		return user.User{}, err
-	}
-
-	return dbUser, nil
-}
-
 func (h *Handler) Login(w http.ResponseWriter, r *http.Request) {
 	var credentials LoginCredentials
 
@@ -142,7 +128,7 @@ func (h *Handler) Login(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	dbUser, err := h.GetUserFromCredentials(credentials)
+	dbUser, err := h.AuthenticateUseCase.Authenticate(credentials.Username, credentials.Password)
 	if err != nil {
 		http.Error(w, apperr.LogsErrorMessage, http.StatusForbidden)
 		return