memnix / memnix-rest

import (

	"fmt"

	"github.com/gofiber/fiber/v2"

	"github.com/memnix/memnix-rest/config"

	"github.com/memnix/memnix-rest/domain"

	"github.com/memnix/memnix-rest/infrastructures"

	"github.com/memnix/memnix-rest/internal/auth"

	"github.com/memnix/memnix-rest/pkg/oauth"

	"github.com/memnix/memnix-rest/pkg/random"

	"github.com/memnix/memnix-rest/views"

	"github.com/uptrace/opentelemetry-go-extra/otelzap"

	"go.opentelemetry.io/otel/attribute"

	"go.uber.org/zap"

)

// OAuthController is the controller for the OAuth routes

type OAuthController struct {

	auth auth.IUseCase // auth usecase

	auth.IAuthRedisRepository

}

// NewOAuthController creates a new OAuthController

func NewOAuthController(auth auth.IUseCase, redisRepository auth.IAuthRedisRepository) OAuthController {

	return OAuthController{auth: auth, IAuthRedisRepository: redisRepository}

}

// GithubLogin redirects the user to the github login page

//

//	@Summary		Redirects the user to the github login page

//	@Description	Redirects the user to the github login page

//	@Tags			OAuth

//	@Accept			json

//	@Produce		json

//	@Success		302	{string}	string					"redirecting to github login"

//	@Failure		500	{object}	views.HTTPResponseVM	"internal server error"

//	@Router			/v2/security/github [get]

func (a *OAuthController) GithubLogin(c *fiber.Ctx) error {

	state, _ := random.GenerateSecretCode(config.OauthStateLength)

	// Create the dynamic redirect URL for login

	redirectURL := fmt.Sprintf(

		"https://github.com/login/oauth/authorize?client_id=%s&redirect_uri=%s&state=%s",

		infrastructures.AppConfig.GithubConfig.ClientID,

		config.GetCurrentURL()+"/v2/security/github_callback",

		state,

	)

	// Save the state in the cache

	if err := a.IAuthRedisRepository.SetState(c.UserContext(), state); err != nil {

		return err

	}

	if err := c.Redirect(redirectURL, fiber.StatusSeeOther); err != nil {

		return err

	}

	return c.JSON(fiber.Map{"message": "redirecting to github login", "redirect_url": redirectURL})

}

// GithubCallback handles the callback from github

//

//	@Summary		Handles the callback from github

//	@Description	Handles the callback from github

//	@Tags			OAuth

//	@Accept			json

//	@Produce		json

//	@Param			code	query		string					true	"code from github"

//	@Success		200		{object}	views.LoginTokenVM		"login token"

//	@Failure		401		{object}	views.HTTPResponseVM	"invalid credentials"

//	@Failure		500		{object}	views.HTTPResponseVM	"internal server error"

//	@Router			/v2/security/github_callback [get]

func (a *OAuthController) GithubCallback(c *fiber.Ctx) error {

	// get the code from the query string

	code := c.Query("code")

	state := c.Query("state")

	// check if the state is valid

	if ok, _ := a.IAuthRedisRepository.HasState(c.UserContext(), state); !ok {

		return c.Status(fiber.StatusUnauthorized).JSON(views.NewLoginTokenVM("", views.InvalidCredentials))

	}

	// get the access token from github

	accessToken, err := oauth.GetGithubAccessToken(c.UserContext(), code)

	if err != nil {

		return c.Status(fiber.StatusUnauthorized).JSON(views.NewLoginTokenVM("", views.InvalidCredentials))

	}

	// get the user from github

	user, err := oauth.GetGithubData(c.UserContext(), accessToken)

	if err != nil {

		return c.Status(fiber.StatusUnauthorized).JSON(views.NewLoginTokenVM("", views.InvalidCredentials))

	}

	var githubUser domain.GithubLogin

	err = config.JSONHelper.Unmarshal([]byte(user), &githubUser)

	if err != nil {

		return c.Status(fiber.StatusUnauthorized).JSON(views.NewLoginTokenVM("", views.InvalidCredentials))

	}

	// log the user

	jwtToken, err := a.auth.LoginOauth(c.UserContext(), githubUser.ToUser())

	if err != nil {

		return c.Status(fiber.StatusUnauthorized).JSON(views.NewLoginTokenVM("", views.InvalidCredentials))

	}

	// Delete the state from the cache

	if err = a.IAuthRedisRepository.DeleteState(c.UserContext(), state); err != nil {

		otelzap.Ctx(c.UserContext()).Error("failed to delete state from cache", zap.Error(err))

	}

	return c.Redirect(config.GetFrontURL()+"/callback/"+jwtToken, fiber.StatusSeeOther)

}

// DiscordLogin redirects the user to the discord login page

//

//	@Summary		Redirects the user to the discord login page

//	@Description	Redirects the user to the discord login page

//	@Tags			OAuth

//	@Accept			json

//	@Produce		json

//	@Success		302	{string}	string					"redirecting to github login"

//	@Failure		500	{object}	views.HTTPResponseVM	"internal server error"

//	@Router			/v2/security/discord [get]

func (a *OAuthController) DiscordLogin(c *fiber.Ctx) error {

	// Create the dynamic redirect URL for login

	state, _ := random.GenerateSecretCode(config.OauthStateLength)

	if err := a.IAuthRedisRepository.SetState(c.UserContext(), state); err != nil {

		return err

	}

	redirectURL := infrastructures.AppConfig.DiscordConfig.URL + "&state=" + state

	err := c.Redirect(redirectURL, fiber.StatusSeeOther)

	if err != nil {

		return err

	}

	return c.JSON(fiber.Map{"message": "redirecting to discord login", "redirect_url": redirectURL})

}

// DiscordCallback handles the callback from discord

//

//	@Summary		Handles the callback from discord

//	@Description	Handles the callback from discord

//	@Tags			OAuth

//	@Accept			json

//	@Produce		json

//	@Param			code	query		string					true	"code from discord"

//	@Success		200		{object}	views.LoginTokenVM		"login token"

//	@Failure		401		{object}	views.HTTPResponseVM	"invalid credentials"

//	@Failure		500		{object}	views.HTTPResponseVM	"internal server error"

//	@Router			/v2/security/discord_callback [get]