mirror of
https://github.com/aaronpo97/the-biergarten-app.git
synced 2026-10-14 17:54:42 +00:00
Aaron Po
de1e9ac02b
* Integrate Spectre.Console into seed application, use async data loading * Replace stored-procedure repositories with Dapper-based repositories Removes the USP_* stored procedures for Auth, Location, and Brewery data access in favour of services built with Dapper. Adds a new Features.Locations slice and optimistic concurrency support for the Brewery slice. * Add new documentation for Dapper migration/database schema * Update FluentAssertions to most recent open source ver * Update XML doc comment in backend projects * Modify brewery location dto to include denormalized data * - Updated column names from 'Timer' to 'RowVersion' in schema.sql for - Introduced new BeerPost entity and updated BreweryPost and BreweryPostLocation entities to use 'RowVersion' for concurrency. - Modified UserAccount, UserCredential, UserVerification, City, StateProvince, and Country entities to use 'RowVersion' instead of 'Timer'. - Updated tests and command handlers to reflect changes in concurrency token from 'Timer' to 'RowVersion'. - Adjusted BreweryDto and BreweryDtoMapper to include 'RowVersion' and updated mapping logic accordingly. - Ensured all repository methods and interfaces are aligned with the new concurrency handling approach. * updates * Add BeerStyle entity and related properties; refactor BreweryDto to remove BeerPosts * Fix Api.Specs test failures: stale Timer column refs and missing test.user fixture * Remove repository tests, usages of registration dto used in repo * archive old stored procs/functions * update stale docs * Add instructions for generating cryptographically secure base64 secrets on macOS/Linux and Windows
44 lines
1.7 KiB
C#
44 lines
1.7 KiB
C#
using Domain.Entities;
|
|
using Domain.Exceptions;
|
|
using Features.Auth.Dtos;
|
|
using Features.Auth.Repository;
|
|
using Features.Auth.Services;
|
|
using Infrastructure.PasswordHashing;
|
|
using MediatR;
|
|
|
|
namespace Features.Auth.Commands.Login;
|
|
|
|
/// <summary>
|
|
/// Handles <see cref="LoginCommand" /> by verifying credentials and issuing access/refresh tokens.
|
|
/// </summary>
|
|
public class LoginHandler(
|
|
IAuthRepository authRepo,
|
|
IPasswordInfrastructure passwordInfrastructure,
|
|
ITokenService tokenService
|
|
) : IRequestHandler<LoginCommand, LoginPayload>
|
|
{
|
|
/// <exception cref="UnauthorizedException">
|
|
/// Thrown when the username does not match any account, the account has no active credential,
|
|
/// or the supplied password does not match the stored hash.
|
|
/// </exception>
|
|
public async Task<LoginPayload> Handle(LoginCommand request, CancellationToken cancellationToken)
|
|
{
|
|
UserAccount user =
|
|
await authRepo.GetUserByUsernameAsync(request.Username)
|
|
?? throw new UnauthorizedException("Invalid username or password.");
|
|
|
|
// @todo handle expired passwords
|
|
UserCredential activeCred =
|
|
await authRepo.GetActiveCredentialByUserAccountIdAsync(user.UserAccountId)
|
|
?? throw new UnauthorizedException("Invalid username or password.");
|
|
|
|
if (!passwordInfrastructure.Verify(request.Password, activeCred.Hash))
|
|
throw new UnauthorizedException("Invalid username or password.");
|
|
|
|
string accessToken = tokenService.GenerateAccessToken(user);
|
|
string refreshToken = tokenService.GenerateRefreshToken(user);
|
|
|
|
return new LoginPayload(user.UserAccountId, user.Username, refreshToken, accessToken);
|
|
}
|
|
}
|