Initialize CMS application scaffold

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

internal/service/auth.go

@@ -0,0 +1,76 @@
+package service
+
+import (
+	"context"
+	"crypto/rand"
+	"encoding/base64"
+	"errors"
+	"github.com/example/cms/internal/domain"
+	"github.com/example/cms/internal/identity"
+	"github.com/example/cms/internal/repository"
+	"strings"
+	"time"
+)
+
+type IUserService interface {
+	Login(context.Context, identity.Identity) (domain.User, string, error)
+	Authenticate(context.Context, string) (domain.Session, error)
+}
+type IAdminAuthService interface {
+	Login(context.Context, string) (domain.Admin, string, error)
+	Authenticate(context.Context, string) (domain.Session, error)
+}
+type AuthService struct {
+	users    repository.IUserRepository
+	admins   repository.IAdminRepository
+	sessions repository.ISessionRepository
+	ttl      time.Duration
+}
+
+func NewAuthService(u repository.IUserRepository, a repository.IAdminRepository, s repository.ISessionRepository, ttl time.Duration) *AuthService {
+	return &AuthService{u, a, s, ttl}
+}
+func (s *AuthService) Login(ctx context.Context, id identity.Identity) (domain.User, string, error) {
+	if strings.TrimSpace(id.Email) == "" || strings.TrimSpace(id.Subject) == "" {
+		return domain.User{}, "", errors.New("identity email and subject are required")
+	}
+	u, e := s.users.FindOrCreateByIdentity(ctx, domain.User{Email: id.Email, Name: id.Name, Provider: "google", ProviderSubject: id.Subject, CreatedAt: time.Now()})
+	if e != nil {
+		return domain.User{}, "", e
+	}
+	t, e := newToken()
+	if e != nil {
+		return domain.User{}, "", e
+	}
+	if e = s.sessions.Create(ctx, domain.Session{Token: t, UserID: &u.ID, ExpiresAt: time.Now().Add(s.ttl), CreatedAt: time.Now()}); e != nil {
+		return domain.User{}, "", e
+	}
+	return u, t, nil
+}
+func (s *AuthService) Authenticate(ctx context.Context, t string) (domain.Session, error) {
+	return s.sessions.FindValid(ctx, t)
+}
+func (s *AuthService) AdminLogin(ctx context.Context, email string) (domain.Admin, string, error) {
+	a, e := s.admins.FindByEmail(ctx, email)
+	if e != nil {
+		return domain.Admin{}, "", errors.New("invalid admin credentials")
+	}
+	t, e := newToken()
+	if e != nil {
+		return domain.Admin{}, "", e
+	}
+	if e = s.sessions.Create(ctx, domain.Session{Token: t, AdminID: &a.ID, ExpiresAt: time.Now().Add(s.ttl), CreatedAt: time.Now()}); e != nil {
+		return domain.Admin{}, "", e
+	}
+	return a, t, nil
+}
+func (s *AuthService) AdminAuthenticate(ctx context.Context, t string) (domain.Session, error) {
+	return s.Authenticate(ctx, t)
+}
+func newToken() (string, error) {
+	b := make([]byte, 32)
+	if _, e := rand.Read(b); e != nil {
+		return "", e
+	}
+	return base64.RawURLEncoding.EncodeToString(b), nil
+}

internal/service/auth_test.go

@@ -0,0 +1,39 @@
+package service
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	"github.com/example/cms/internal/domain"
+	"github.com/example/cms/internal/identity"
+)
+
+type fakeUsers struct{}
+
+func (fakeUsers) FindOrCreateByIdentity(_ context.Context, u domain.User) (domain.User, error) {
+	u.ID = 7
+	return u, nil
+}
+
+type fakeAdmins struct{}
+
+func (fakeAdmins) FindByEmail(context.Context, string) (domain.Admin, error) {
+	return domain.Admin{ID: 2, Email: "admin@example.com"}, nil
+}
+
+type fakeSessions struct{ created domain.Session }
+
+func (f *fakeSessions) Create(_ context.Context, s domain.Session) error { f.created = s; return nil }
+func (f *fakeSessions) FindValid(context.Context, string) (domain.Session, error) {
+	return f.created, nil
+}
+
+func TestAuthServiceCreatesUserSession(t *testing.T) {
+	sessions := &fakeSessions{}
+	s := NewAuthService(fakeUsers{}, fakeAdmins{}, sessions, time.Hour)
+	u, token, err := s.Login(context.Background(), identity.Identity{Subject: "sub", Email: "user@example.com"})
+	if err != nil || token == "" || u.ID != 7 || sessions.created.UserID == nil {
+		t.Fatalf("login failed: user=%+v token=%q session=%+v err=%v", u, token, sessions.created, err)
+	}
+}