51 lines
1.5 KiB
Java
51 lines
1.5 KiB
Java
package dev.dinauer.login;
|
|
|
|
import java.time.ZonedDateTime;
|
|
import java.util.Optional;
|
|
|
|
import jakarta.enterprise.context.ApplicationScoped;
|
|
import jakarta.inject.Inject;
|
|
import jakarta.ws.rs.*;
|
|
import jakarta.ws.rs.core.MediaType;
|
|
import jakarta.ws.rs.core.Response;
|
|
|
|
import org.jboss.logging.Logger;
|
|
|
|
import io.quarkus.elytron.security.common.BcryptUtil;
|
|
import io.smallrye.jwt.build.Jwt;
|
|
|
|
@Path("/login")
|
|
@ApplicationScoped
|
|
public class LoginResource
|
|
{
|
|
@Inject
|
|
Logger LOG;
|
|
|
|
@Inject
|
|
UserRepo userRepo;
|
|
|
|
@POST
|
|
@Consumes(MediaType.APPLICATION_JSON)
|
|
@Produces(MediaType.TEXT_PLAIN)
|
|
public String login(Login login)
|
|
{
|
|
Optional<UserEntity> userOptional = userRepo.findOptionalByUsername(login.username());
|
|
if(userOptional.isPresent())
|
|
{
|
|
UserEntity user = userOptional.get();
|
|
if(BcryptUtil.matches(login.password(), user.getPassword()))
|
|
{
|
|
return Jwt
|
|
.upn(user.getId())
|
|
.expiresAt(ZonedDateTime.now().plusDays(15).toInstant())
|
|
.groups(user.getRoles())
|
|
.sign();
|
|
}
|
|
LOG.info("Cannot access user. Forbidden");
|
|
throw new ForbiddenException(Response.status(403).type(MediaType.TEXT_PLAIN).entity("wrong_password").build());
|
|
}
|
|
LOG.info("User not found");
|
|
throw new NotFoundException(Response.status(404).type(MediaType.TEXT_PLAIN).entity("user_not_found").build());
|
|
}
|
|
}
|