feat: 统一sql命名、函数命名

internal/handler/admin/auth.go

@@ -0,0 +1,109 @@
+package admin
+
+import (
+	"net/http"
+	"server/internal/config"
+	"server/internal/model/request"
+	"server/internal/pkg/errs"
+	"server/internal/pkg/httputil"
+	"server/internal/router"
+	"server/internal/service/admin"
+	"time"
+
+	"github.com/go-chi/chi/v5"
+)
+
+type AuthHandler struct {
+	authService *admin.AuthService
+	cfg         *config.Config
+}
+
+var _ router.Registrar = (*AuthHandler)(nil)
+
+func NewAuthHandler(authService *admin.AuthService, cfg *config.Config) *AuthHandler {
+	return &AuthHandler{authService: authService, cfg: cfg}
+}
+
+func (h *AuthHandler) Register(r chi.Router) {
+	r.Route("/auth", func(r chi.Router) {
+		r.Post("/login", h.Login)
+		r.Post("/refresh-token", h.RefreshToken)
+		r.Post("/logout", h.Logout)
+	})
+}
+
+func (h *AuthHandler) clearRefreshTokenCookie(w http.ResponseWriter) {
+	http.SetCookie(w, &http.Cookie{
+		Name:     h.cfg.JWTConfig.CookieName,
+		Value:    "",
+		Path:     "/",
+		HttpOnly: true,
+		Secure:   true,
+		SameSite: http.SameSiteNoneMode,
+		MaxAge:   -1,
+		Expires:  time.Unix(0, 0),
+	})
+}
+
+func (h *AuthHandler) Login(w http.ResponseWriter, r *http.Request) {
+	var req request.LoginRequest
+
+	if err := httputil.BindJson(r, &req); err != nil {
+		httputil.Fail(w, errs.ErrInvalidCredentials)
+		return
+	}
+
+	res, err := h.authService.Login(r.Context(), req)
+	if err != nil {
+		httputil.Fail(w, err)
+		return
+	}
+
+	http.SetCookie(w, &http.Cookie{
+		Name:     h.cfg.JWTConfig.CookieName,
+		Value:    res.RefreshToken,
+		Path:     "/",
+		HttpOnly: true,
+		Secure:   true,
+		SameSite: http.SameSiteNoneMode,
+		Expires:  res.RefreshTokenExp,
+	})
+
+	httputil.Ok(w, map[string]any{
+		"access_token":     res.AccessToken,
+		"access_token_exp": res.AccessTokenExp,
+	})
+}
+
+func (h *AuthHandler) Logout(w http.ResponseWriter, r *http.Request) {
+	cookie, err := r.Cookie(h.cfg.JWTConfig.CookieName)
+	if err == nil {
+		_ = h.authService.Logout(r.Context(), cookie.Value)
+	}
+
+	h.clearRefreshTokenCookie(w)
+	httputil.Ok(w)
+}
+
+func (h *AuthHandler) RefreshToken(w http.ResponseWriter, r *http.Request) {
+	cookie, err := r.Cookie(h.cfg.JWTConfig.CookieName)
+	if err != nil {
+		h.clearRefreshTokenCookie(w)
+		httputil.Fail(w, errs.ErrInvalidRefreshToken)
+		return
+	}
+
+	res, err := h.authService.RefreshToken(r.Context(), cookie.Value)
+	if err != nil {
+		// 用户被禁用 调用logout
+		_ = h.authService.Logout(r.Context(), cookie.Value)
+		h.clearRefreshTokenCookie(w)
+		httputil.Fail(w, err)
+		return
+	}
+
+	httputil.Ok(w, map[string]any{
+		"access_token":     res.AccessToken,
+		"access_token_exp": res.AccessTokenExp,
+	})
+}