userauth.go

package userauth

import (
	"errors"
	"fmt"
)

type User struct {
	Id      string // user Identifying string: e.g. name or email
	HashPw  string // hashed passwd in one of the supported algorithms
	Enabled bool   // flag if user is enabled
	//MinLoginTime time.Time // can be set to a time, where all tokens/sessions created before this time are invalid
}

type UserGetter interface {
	GetUser(id string) (User, error)
}

type LoginHandler struct {
	UserStore UserGetter
}

func (lh LoginHandler) CanLogin(userId string, plainPw string) (bool, error) {
	if lh.UserStore == nil {
		return false, fmt.Errorf("user store is not defined")
	}
	user, err := lh.UserStore.GetUser(userId)

	if errors.Is(err, ErrUserNotFound) {
		return false, nil
	} else if err != nil {
		return false, err
	}

	if !user.Enabled {
		return false, ErrUserDisabled
	}
	isOk, err := CheckPass(plainPw, user.HashPw)
	if err != nil {
		return false, err
	}
	return isOk, nil
}

// ErrUserNotFound is thrown when a user is not found
var ErrUserNotFound = errors.New("user not found")

// ErrUserDisabled is thrown when a user is not enabled
var ErrUserDisabled = errors.New("user is not enabled")