54 lines
1.2 KiB
Go
54 lines
1.2 KiB
Go
package service
|
|
|
|
import (
|
|
"errors"
|
|
"os"
|
|
"time"
|
|
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/zs/InsightReply/internal/repository"
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
type AuthService struct {
|
|
userRepo *repository.UserRepository
|
|
}
|
|
|
|
func NewAuthService(userRepo *repository.UserRepository) *AuthService {
|
|
return &AuthService{userRepo: userRepo}
|
|
}
|
|
|
|
func (s *AuthService) Login(email, password string) (string, error) {
|
|
// 1. Fetch user by email
|
|
user, err := s.userRepo.GetByEmail(email)
|
|
if err != nil {
|
|
return "", errors.New("invalid email or password")
|
|
}
|
|
|
|
// 2. Compare password hash
|
|
err = bcrypt.CompareHashAndPassword([]byte(user.PasswordHash), []byte(password))
|
|
if err != nil {
|
|
return "", errors.New("invalid email or password")
|
|
}
|
|
|
|
// 3. Generate JWT Token
|
|
secret := os.Getenv("JWT_SECRET")
|
|
if secret == "" {
|
|
secret = "fallback_secret_key_change_in_production"
|
|
}
|
|
|
|
token := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
|
|
"sub": user.ID.String(),
|
|
"email": user.Email,
|
|
"exp": time.Now().Add(time.Hour * 72).Unix(), // 3 days expiration
|
|
"iat": time.Now().Unix(),
|
|
})
|
|
|
|
tokenString, err := token.SignedString([]byte(secret))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
return tokenString, nil
|
|
}
|