init

2025-10-16 15:06:20 +03:00
commit 040da34ff7
78 changed files with 3934 additions and 0 deletions
--- a/src/main/kotlin/space/luminic/finance/services/AuthService.kt
+++ b/src/main/kotlin/space/luminic/finance/services/AuthService.kt
@@ -0,0 +1,109 @@
+package space.luminic.finance.services
+
+import kotlinx.coroutines.reactive.awaitFirstOrNull
+import kotlinx.coroutines.reactor.awaitSingle
+import kotlinx.coroutines.reactor.awaitSingleOrNull
+import org.springframework.cache.annotation.Cacheable
+import org.springframework.security.core.context.ReactiveSecurityContextHolder
+import org.springframework.security.core.userdetails.UsernameNotFoundException
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder
+import org.springframework.stereotype.Service
+import space.luminic.finance.configs.AuthException
+import space.luminic.finance.models.Token
+import space.luminic.finance.models.User
+import space.luminic.finance.repos.UserRepo
+import space.luminic.finance.utils.JWTUtil
+import java.time.LocalDateTime
+import java.time.ZoneId
+import java.util.*
+
+
+@Service
+class AuthService(
+    private val userRepository: UserRepo,
+    private val tokenService: TokenService,
+    private val jwtUtil: JWTUtil,
+    private val userService: UserService,
+
+    ) {
+    private val passwordEncoder = BCryptPasswordEncoder()
+
+    suspend fun getSecurityUser(): User {
+        val securityContextHolder = ReactiveSecurityContextHolder.getContext().awaitSingleOrNull()
+            ?: throw AuthException("Authentication failed")
+        val authentication = securityContextHolder.authentication
+
+        val username = authentication.name
+        // Получаем пользователя по имени
+        return userService.getByUsername(username)
+    }
+
+    suspend fun login(username: String, password: String): String {
+        val user = userRepository.findByUsername(username).awaitFirstOrNull()
+            ?: throw UsernameNotFoundException("Пользователь не найден")
+        return if (passwordEncoder.matches(password, user.password)) {
+            val token = jwtUtil.generateToken(user.username)
+            val expireAt = Date(System.currentTimeMillis() + 1000 * 60 * 60 * 24 * 10)
+            tokenService.saveToken(
+                token = token,
+                username = username,
+                expiresAt = LocalDateTime.ofInstant(
+                    expireAt.toInstant(),
+                    ZoneId.systemDefault()
+                )
+            )
+            token
+        } else {
+            throw IllegalArgumentException("Ошибка логина или пароля")
+        }
+    }
+
+    suspend fun tgLogin(tgId: String): String {
+        val user =
+            userRepository.findByTgId(tgId).awaitSingleOrNull() ?: throw UsernameNotFoundException("Пользователь не найден")
+
+        val token = jwtUtil.generateToken(user.username)
+        val expireAt = Date(System.currentTimeMillis() + 1000 * 60 * 60 * 24 * 10)
+        tokenService.saveToken(
+            token = token,
+            username = user.username,
+            expiresAt = LocalDateTime.ofInstant(
+                expireAt.toInstant(),
+                ZoneId.systemDefault()
+            )
+        )
+        return token
+
+    }
+
+    suspend fun register(username: String, password: String, firstName: String): User {
+        val user = userRepository.findByUsername(username).awaitSingleOrNull()
+        if (user == null) {
+            var newUser = User(
+                username = username,
+                password = passwordEncoder.encode(password), // Шифрование пароля
+                firstName = firstName,
+                roles = mutableListOf("USER")
+            )
+            newUser = userRepository.save(newUser).awaitSingle()
+            return newUser
+        } else throw IllegalArgumentException("Пользователь уже зарегистрирован")
+    }
+
+
+    @Cacheable(cacheNames = ["tokens"], key = "#token")
+    suspend fun isTokenValid(token: String): User {
+        val tokenDetails = tokenService.getToken(token).awaitFirstOrNull() ?: throw AuthException("Токен не валиден")
+        when {
+            tokenDetails.status == Token.TokenStatus.ACTIVE && tokenDetails.expiresAt.isAfter(LocalDateTime.now()) -> {
+                return userService.getByUsername(tokenDetails.username)
+            }
+
+            else -> {
+                tokenService.revokeToken(tokenDetails.token)
+                throw AuthException("Токен истек или не валиден")
+            }
+        }
+    }
+
+}