m
c2c7dddba6
- 000006 : users.username/username_normalized/password_hash/is_admin, index unique partiel sur username_normalized, DROP idx_users_email (unicité V1 = username, jamais email) ; 000007 destructif : resources.owner_id→user_id (FK→users, reset base dev), l'unicité racine devient par user - pkg/passwd : argon2id (t=1,m=64MiB,p=4,k=32), comparaison constant-time, VerifyTimedEqual (délai égalisé dummy-hash) ; pkg/auth : subject=user_id + claim device_id, TTL 7 j sans refresh - repository : Users (count/get/resolve-exact/create/update-password/ mark-deleted), Devices.MarkUser (user_id INFORMATIF uniquement) - handlers : POST /devices sans token, POST /auth/login (401 indistinguable user inconnu/mauvais mdp, device requis), PATCH /users/me/password (current_password, tokens non révoqués — limite V1), GET /users/resolve (exact lowercase, jamais email/is_admin) ; middleware RequireAuth (user authorisant, device porté) ; tout le scoping ressources passe user - bootstrap admin : users vide + ADMIN_* absents → refus de démarrer ; .env.example ; docs/api-v1.md §2/§3/§7/§8 - tests : migrations 000006/000007 (up/down), pkg/auth Identity, handlers login/password/resolve, helpers refactorés registerAndLogin, repo tests scopés user — suite backend verte
43 lines
1.1 KiB
Go
43 lines
1.1 KiB
Go
package repository
|
|
|
|
import (
|
|
"database/sql"
|
|
)
|
|
|
|
// Devices persists registered devices (idempotence outbox par device, dernier
|
|
// user_id informatif).
|
|
type Devices struct {
|
|
DB *sql.DB
|
|
}
|
|
|
|
// Upsert registers the device if absent and refreshes last_seen_at.
|
|
func (d *Devices) Upsert(deviceID string) error {
|
|
_, err := d.DB.Exec(
|
|
`INSERT INTO devices (device_id, registered_at, last_seen_at)
|
|
VALUES ($1, NOW(), NOW())
|
|
ON CONFLICT (device_id) DO UPDATE SET last_seen_at = NOW()`,
|
|
deviceID,
|
|
)
|
|
return err
|
|
}
|
|
|
|
// Exists reports whether a device has been registered.
|
|
func (d *Devices) Exists(deviceID string) (bool, error) {
|
|
var exists int
|
|
err := d.DB.QueryRow(`SELECT 1 FROM devices WHERE device_id = $1`, deviceID).Scan(&exists)
|
|
if err == sql.ErrNoRows {
|
|
return false, nil
|
|
}
|
|
return err == nil, err
|
|
}
|
|
|
|
// MarkUser mémorise le dernier utilisateur connecté sur ce device (INFORMATIF,
|
|
// jamais autorisant) et rafraîchit last_seen_at. Appelé au login.
|
|
func (d *Devices) MarkUser(deviceID, userID string) error {
|
|
_, err := d.DB.Exec(
|
|
`UPDATE devices SET user_id = $2, last_seen_at = NOW() WHERE device_id = $1`,
|
|
deviceID, userID,
|
|
)
|
|
return err
|
|
}
|