9 changed files with 531 additions and 114 deletions
-
39cmd/server/main.go
-
192cmd/server/server.go
-
60cmd/server/token_db.go
-
62cmd/server/user_db.go
-
15go.mod
-
24go.sum
-
184proto/users.pb.go
-
17proto/users.proto
-
52proto/users_grpc.pb.go
@ -0,0 +1,39 @@ |
|||
package main |
|||
|
|||
import ( |
|||
"flag" |
|||
"fmt" |
|||
"log" |
|||
"net" |
|||
|
|||
"git.chrishayward.xyz/x/users/proto" |
|||
"github.com/google/uuid" |
|||
"google.golang.org/grpc" |
|||
) |
|||
|
|||
var ( |
|||
secretDefault = uuid.NewString() |
|||
secret = flag.String("secret", secretDefault, "--secret=SECRET") |
|||
port = flag.Uint("port", 8080, "--port=8080") |
|||
) |
|||
|
|||
func main() { |
|||
// Parse the optional flags.
|
|||
flag.Parse() |
|||
|
|||
// If the secret has not been set print it to the console.
|
|||
if *secret == secretDefault { |
|||
fmt.Printf("SECRET=%s", secretDefault) |
|||
} |
|||
|
|||
// Create the network listener.
|
|||
lis, err := net.Listen("tcp", fmt.Sprintf(":%d", *port)) |
|||
if err != nil { |
|||
log.Fatalf("Failed to listen: %v", err) |
|||
} |
|||
|
|||
// Start listening for requests.
|
|||
srv := grpc.NewServer() |
|||
proto.RegisterUsersServer(srv, newUsersServer(secret)) |
|||
srv.Serve(lis) |
|||
} |
|||
@ -0,0 +1,192 @@ |
|||
package main |
|||
|
|||
import ( |
|||
"context" |
|||
"errors" |
|||
"log" |
|||
"time" |
|||
|
|||
"github.com/google/uuid" |
|||
"golang.org/x/crypto/bcrypt" |
|||
|
|||
"git.chrishayward.xyz/x/users/proto" |
|||
) |
|||
|
|||
type usersServer struct { |
|||
proto.UsersServer |
|||
secret *string |
|||
users UserDB |
|||
tokens TokenDB |
|||
resetTokens TokenDB |
|||
} |
|||
|
|||
func newUsersServer(secret *string) proto.UsersServer { |
|||
return &usersServer{ |
|||
secret: secret, |
|||
users: newInMemoryUserDB(), |
|||
tokens: newInMemoryTokenDB(), |
|||
resetTokens: newInMemoryTokenDB(), |
|||
} |
|||
} |
|||
|
|||
func (m *usersServer) Register(ctx context.Context, in *proto.RegisterRequest) (*proto.RegisterResponse, error) { |
|||
// Make sure both passwords are included and match.
|
|||
if in.Form.Password == nil || in.Form.PasswordAgain == nil { |
|||
return nil, errors.New("Must include password(s).") |
|||
} |
|||
|
|||
if *in.Form.Password != *in.Form.PasswordAgain { |
|||
return nil, errors.New("Passwords do not match.") |
|||
} |
|||
|
|||
// Check for an existing user.
|
|||
if u, _ := m.users.FindByEmail(in.Form.Email); u != nil { |
|||
return nil, errors.New("User already exists.") |
|||
} |
|||
|
|||
// Encode the password.
|
|||
bytes, err := bcrypt.GenerateFromPassword([]byte(*in.Form.Password), bcrypt.MaxCost) |
|||
if err != nil { |
|||
log.Fatalf("Failed to encode password: %v", err) |
|||
return nil, errors.New("Failed to encode password.") |
|||
} |
|||
|
|||
// Create the new user.
|
|||
if err := m.users.Save(&User{ |
|||
Email: in.Form.Email, |
|||
Password: string(bytes), |
|||
}); err != nil { |
|||
log.Fatalf("Failed to save user: %v", err) |
|||
return nil, errors.New("Failed to save user.") |
|||
} |
|||
|
|||
// Return the response.
|
|||
return &proto.RegisterResponse{}, nil |
|||
} |
|||
|
|||
func (m *usersServer) Login(ctx context.Context, in *proto.LoginRequest) (*proto.LoginResponse, error) { |
|||
// Make sure the password is included.
|
|||
if in.Form.Password == nil { |
|||
return nil, errors.New("Password must be included.") |
|||
} |
|||
|
|||
// Find the user.
|
|||
user, err := m.users.FindByEmail(in.Form.Email) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Compare the passwords.
|
|||
if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(*in.Form.Password)); err != nil { |
|||
return nil, errors.New("Passwords do not match.") |
|||
} |
|||
|
|||
// Create a token.
|
|||
expires := time.Now().AddDate(0, 0, 1) |
|||
token := &Token{ |
|||
UserID: user.ID, |
|||
Token: uuid.NewString(), |
|||
Expires: &expires, |
|||
} |
|||
|
|||
// Save the token.
|
|||
m.tokens.Save(token) |
|||
|
|||
// Return the response.
|
|||
expiresNano := expires.UnixNano() |
|||
return &proto.LoginResponse{ |
|||
Token: &proto.UserToken{ |
|||
Token: token.Token, |
|||
Expires: &expiresNano, |
|||
}, |
|||
}, nil |
|||
} |
|||
|
|||
func (m *usersServer) Authorize(ctx context.Context, in *proto.AuthorizeRequest) (*proto.AuthorizeResponse, error) { |
|||
// Make sure the secrets match.
|
|||
if in.Secret != *m.secret { |
|||
return nil, errors.New("Secrets do not match.") |
|||
} |
|||
|
|||
// Find the token.
|
|||
token, err := m.tokens.FindByToken(in.Token.Token) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Make sure the token hasn't expired.
|
|||
if token.Expires.After(time.Now()) { |
|||
return nil, errors.New("Token is expired.") |
|||
} |
|||
|
|||
// Return the user ID.
|
|||
return &proto.AuthorizeResponse{ |
|||
User: &proto.UserInfo{ |
|||
Id: int64(token.UserID), |
|||
}, |
|||
}, nil |
|||
} |
|||
|
|||
func (m *usersServer) ResetPassword(ctx context.Context, in *proto.ResetPasswordRequest) (*proto.ResetPasswordResponse, error) { |
|||
// Find the user.
|
|||
user, err := m.users.FindByEmail(in.Form.Email) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Generate a reset token.
|
|||
expires := time.Now().AddDate(0, 0, 1) |
|||
token := &Token{ |
|||
UserID: user.ID, |
|||
Token: uuid.NewString(), |
|||
Expires: &expires, |
|||
} |
|||
|
|||
// Save the token.
|
|||
if err := m.resetTokens.Save(token); err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Return the response.
|
|||
return &proto.ResetPasswordResponse{ |
|||
Token: &proto.UserToken{ |
|||
Token: token.Token, |
|||
}, |
|||
}, nil |
|||
} |
|||
|
|||
func (m *usersServer) ChangePassword(ctx context.Context, in *proto.ChangePasswordRequest) (*proto.ChangePasswordResponse, error) { |
|||
// Find the reset token.
|
|||
resetToken, err := m.resetTokens.FindByToken(in.Token.Token) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Find the user.
|
|||
user, err := m.users.FindByID(resetToken.UserID) |
|||
if err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Update the password.
|
|||
bytes, err := bcrypt.GenerateFromPassword([]byte(*in.Form.Password), bcrypt.MaxCost) |
|||
if err != nil { |
|||
log.Fatalf("Failed to encode password: %v", err) |
|||
return nil, errors.New("Failed to encode password.") |
|||
} |
|||
|
|||
user.Password = string(bytes) |
|||
if err := m.users.Save(user); err != nil { |
|||
return nil, err |
|||
} |
|||
|
|||
// Expire current token.
|
|||
if token, err := m.tokens.FindByUserID(user.ID); token != nil && err == nil { |
|||
expires := time.Now() |
|||
token.Expires = &expires |
|||
_ = m.tokens.Save(token) |
|||
} |
|||
|
|||
// Return the response.
|
|||
return nil, nil |
|||
} |
|||
@ -0,0 +1,60 @@ |
|||
package main |
|||
|
|||
import ( |
|||
"errors" |
|||
"time" |
|||
) |
|||
|
|||
type Token struct { |
|||
UserID int64 |
|||
Token string |
|||
Expires *time.Time |
|||
} |
|||
|
|||
type TokenDB interface { |
|||
FindByUserID(id int64) (*Token, error) |
|||
FindByToken(token string) (*Token, error) |
|||
Save(token *Token) error |
|||
} |
|||
|
|||
type inMemoryTokenDB struct { |
|||
tokens []*Token |
|||
} |
|||
|
|||
func newInMemoryTokenDB() *inMemoryTokenDB { |
|||
return &inMemoryTokenDB{ |
|||
tokens: make([]*Token, 0), |
|||
} |
|||
} |
|||
|
|||
func (m *inMemoryTokenDB) FindByUserID(id int64) (*Token, error) { |
|||
for _, t := range m.tokens { |
|||
if t.UserID == id { |
|||
return t, nil |
|||
} |
|||
} |
|||
|
|||
return nil, errors.New("Token not found.") |
|||
} |
|||
|
|||
func (m *inMemoryTokenDB) FindByToken(token string) (*Token, error) { |
|||
for _, t := range m.tokens { |
|||
if t.Token == token { |
|||
return t, nil |
|||
} |
|||
} |
|||
|
|||
return nil, errors.New("Token not found.") |
|||
} |
|||
|
|||
func (m *inMemoryTokenDB) Save(token *Token) error { |
|||
for i, t := range m.tokens { |
|||
if t.UserID == token.UserID || t.Token == token.Token { |
|||
m.tokens[i] = token |
|||
return nil |
|||
} |
|||
} |
|||
|
|||
m.tokens = append(m.tokens, token) |
|||
return nil |
|||
} |
|||
@ -0,0 +1,62 @@ |
|||
package main |
|||
|
|||
import "errors" |
|||
|
|||
type User struct { |
|||
ID int64 |
|||
Email string |
|||
Password string |
|||
} |
|||
|
|||
type UserDB interface { |
|||
FindByID(id int64) (*User, error) |
|||
FindByEmail(email string) (*User, error) |
|||
Save(*User) error |
|||
} |
|||
|
|||
type inMemoryUserDB struct { |
|||
UserDB |
|||
nextID int |
|||
users []*User |
|||
} |
|||
|
|||
func newInMemoryUserDB() *inMemoryUserDB { |
|||
return &inMemoryUserDB{ |
|||
nextID: 1, |
|||
users: make([]*User, 0), |
|||
} |
|||
} |
|||
|
|||
func (m *inMemoryUserDB) FindByID(id int64) (*User, error) { |
|||
for _, u := range m.users { |
|||
if u.ID == id { |
|||
return u, nil |
|||
} |
|||
} |
|||
|
|||
return nil, errors.New("User not found.") |
|||
} |
|||
|
|||
func (m *inMemoryUserDB) FindByEmail(email string) (*User, error) { |
|||
for _, u := range m.users { |
|||
if u.Email == email { |
|||
return u, nil |
|||
} |
|||
} |
|||
|
|||
return nil, errors.New("User not found.") |
|||
} |
|||
|
|||
func (m *inMemoryUserDB) Save(user *User) error { |
|||
for i, u := range m.users { |
|||
if u.ID == user.ID || u.Email == user.Email { |
|||
m.users[i] = user |
|||
return nil |
|||
} |
|||
} |
|||
|
|||
user.ID = m.nextID |
|||
m.users = append(m.users, user) |
|||
m.nextID++ |
|||
return nil |
|||
} |
|||
@ -1,3 +1,18 @@ |
|||
module git.chrishayward.xyz/x/users |
|||
|
|||
go 1.20 |
|||
|
|||
require ( |
|||
github.com/google/uuid v1.3.0 |
|||
golang.org/x/crypto v0.10.0 |
|||
google.golang.org/grpc v1.56.1 |
|||
google.golang.org/protobuf v1.31.0 |
|||
) |
|||
|
|||
require ( |
|||
github.com/golang/protobuf v1.5.3 // indirect |
|||
golang.org/x/net v0.10.0 // indirect |
|||
golang.org/x/sys v0.9.0 // indirect |
|||
golang.org/x/text v0.10.0 // indirect |
|||
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 // indirect |
|||
) |
|||
@ -0,0 +1,24 @@ |
|||
github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= |
|||
github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg= |
|||
github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= |
|||
github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= |
|||
github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38= |
|||
github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I= |
|||
github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= |
|||
golang.org/x/crypto v0.10.0 h1:LKqV2xt9+kDzSTfOhx4FrkEBcMrAgHSYgzywV9zcGmM= |
|||
golang.org/x/crypto v0.10.0/go.mod h1:o4eNf7Ede1fv+hwOwZsTHl9EsPFO6q6ZvYR8vYfY45I= |
|||
golang.org/x/net v0.10.0 h1:X2//UzNDwYmtCLn7To6G58Wr6f5ahEAQgKNzv9Y951M= |
|||
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg= |
|||
golang.org/x/sys v0.9.0 h1:KS/R3tvhPqvJvwcKfnBHJwwthS11LRhmM5D59eEXa0s= |
|||
golang.org/x/sys v0.9.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= |
|||
golang.org/x/text v0.10.0 h1:UpjohKhiEgNc0CSauXmwYftY1+LlaC75SJwh0SgCX58= |
|||
golang.org/x/text v0.10.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE= |
|||
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= |
|||
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 h1:KpwkzHKEF7B9Zxg18WzOa7djJ+Ha5DzthMyZYQfEn2A= |
|||
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1/go.mod h1:nKE/iIaLqn2bQwXBg8f1g2Ylh6r5MN5CmZvuzZCgsCU= |
|||
google.golang.org/grpc v1.56.1 h1:z0dNfjIl0VpaZ9iSVjA6daGatAYwPGstTjt5vkRMFkQ= |
|||
google.golang.org/grpc v1.56.1/go.mod h1:I9bI3vqKfayGqPUAwGdOSu7kt6oIJLixfffKrpXqQ9s= |
|||
google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= |
|||
google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= |
|||
google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8= |
|||
google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue