72 lines
2.0 KiB
Go
72 lines
2.0 KiB
Go
package useCases
|
|
|
|
import (
|
|
"RenewCMS/internal/domain/audit"
|
|
"RenewCMS/internal/domain/hash"
|
|
"RenewCMS/internal/domain/mail"
|
|
"RenewCMS/internal/domain/user"
|
|
"context"
|
|
"log"
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
)
|
|
|
|
type RequestPasswordResetUseCase struct {
|
|
userRepository user.Repository
|
|
hasher hash.Hasher
|
|
mailRepository mail.Repository
|
|
publicURL string
|
|
recorder audit.Recorder
|
|
}
|
|
|
|
type MailPasswordResetData struct {
|
|
Host string
|
|
VerificationCode string
|
|
Email string
|
|
}
|
|
|
|
func NewRequestPasswordResetUseCase(userRepository user.Repository, hasher hash.Hasher, mailRepository mail.Repository, publicURL string, recorder audit.Recorder) *RequestPasswordResetUseCase {
|
|
return &RequestPasswordResetUseCase{userRepository, hasher, mailRepository, publicURL, recorder}
|
|
}
|
|
|
|
func (g *RequestPasswordResetUseCase) RequestPasswordReset(ctx context.Context, email string) error {
|
|
foundUser, err := g.userRepository.GetByEmail(email)
|
|
if err != nil {
|
|
return nil
|
|
}
|
|
|
|
rawCode := uuid.NewString()
|
|
|
|
hashedCode, err := g.hasher.Hash(rawCode)
|
|
if err != nil {
|
|
log.Println("error when hashing the password reset code:", err)
|
|
return nil
|
|
}
|
|
|
|
if _, err := g.userRepository.UpdatePasswordResetCode(foundUser.ID, hashedCode, time.Now().Add(time.Hour)); err != nil {
|
|
log.Println("error when calling UpdatePasswordResetCode to store the password reset code:", err)
|
|
return nil
|
|
}
|
|
|
|
g.recordRequest(ctx, foundUser)
|
|
|
|
if err := g.mailRepository.Send(foundUser.Email, "password-reset", MailPasswordResetData{
|
|
Host: g.publicURL,
|
|
VerificationCode: rawCode,
|
|
Email: foundUser.Email,
|
|
}); err != nil {
|
|
log.Println("error when Send-ing the password reset mail:", err)
|
|
return nil
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (g *RequestPasswordResetUseCase) recordRequest(ctx context.Context, requester user.User) {
|
|
event := audit.NewEvent(audit.ActionPasswordResetRequest, audit.CategoryAuth)
|
|
event.Actor = audit.UserActor(requester)
|
|
event.Security = true
|
|
g.recorder.Record(ctx, event)
|
|
}
|