root
44406b72db
Moteva-style AI design workbench replica. Home prompt creates a project; the project page provides an infinite canvas with node drag, zoom/pan, a design chat panel, history replay, image asset upload, and project save/regenerate. - Backend: go-zero, DDD layering, sqlc/pgx, optional PostgreSQL; memory or Redis cache; asynq job queue; MinIO/S3/R2/OSS object storage; sky-valley/pi agent runtime adapter. - Frontend: Next.js App Router + Vite artifact build, TypeScript, i18n, shadcn/ui components, auth (OTP/Turnstile/Google/WeChat). - Deploy: Docker Compose and k3s manifests. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
196 lines
8.6 KiB
Go
196 lines
8.6 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"strings"
|
|
"time"
|
|
|
|
"img_infinite_canvas/internal/domain/design"
|
|
|
|
"github.com/google/uuid"
|
|
"github.com/jackc/pgx/v5"
|
|
"github.com/jackc/pgx/v5/pgtype"
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
)
|
|
|
|
type PostgresStore struct {
|
|
pool *pgxpool.Pool
|
|
}
|
|
|
|
func NewPostgresStore(ctx context.Context, dataSource string) (*PostgresStore, error) {
|
|
pool, err := pgxpool.New(ctx, dataSource)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if err := pool.Ping(ctx); err != nil {
|
|
pool.Close()
|
|
return nil, err
|
|
}
|
|
return &PostgresStore{pool: pool}, nil
|
|
}
|
|
|
|
func (s *PostgresStore) FindUserByID(ctx context.Context, id string) (User, error) {
|
|
return s.findUser(ctx, `SELECT id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status FROM users WHERE id = $1`, toPGUUID(id))
|
|
}
|
|
|
|
func (s *PostgresStore) FindUserByPhone(ctx context.Context, countryCode string, phone string) (User, error) {
|
|
return s.findUser(ctx, `SELECT id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status FROM users WHERE phone_country_code = $1 AND phone = $2`, normalizeCountryCode(countryCode), normalizePhone(phone))
|
|
}
|
|
|
|
func (s *PostgresStore) FindUserByEmail(ctx context.Context, email string) (User, error) {
|
|
return s.findUser(ctx, `SELECT id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status FROM users WHERE LOWER(email) = LOWER($1)`, normalizeEmail(email))
|
|
}
|
|
|
|
func (s *PostgresStore) FindUserByGoogleSubject(ctx context.Context, subject string) (User, error) {
|
|
return s.findUser(ctx, `SELECT id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status FROM users WHERE google_subject = $1`, subject)
|
|
}
|
|
|
|
func (s *PostgresStore) FindUserByWechat(ctx context.Context, openID string, unionID string) (User, error) {
|
|
if unionID != "" {
|
|
return s.findUser(ctx, `
|
|
SELECT id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status
|
|
FROM users
|
|
WHERE wechat_union_id = $1 OR wechat_open_id = $2
|
|
ORDER BY CASE WHEN wechat_union_id = $1 THEN 0 ELSE 1 END
|
|
LIMIT 1`, unionID, openID)
|
|
}
|
|
return s.findUser(ctx, `SELECT id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status FROM users WHERE wechat_open_id = $1`, openID)
|
|
}
|
|
|
|
func (s *PostgresStore) UpsertUser(ctx context.Context, user User) (User, error) {
|
|
now := time.Now()
|
|
phone := normalizePhone(user.Phone)
|
|
countryCode := ""
|
|
if phone != "" {
|
|
countryCode = normalizeCountryCode(user.CountryCode)
|
|
}
|
|
row := s.pool.QueryRow(ctx, `
|
|
INSERT INTO users (id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status, phone_verified_at, email_verified_at, last_login_at, created_at, updated_at)
|
|
VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12,
|
|
CASE WHEN $4 <> '' THEN $13::timestamptz ELSE NULL::timestamptz END,
|
|
CASE WHEN $5 <> '' THEN $13::timestamptz ELSE NULL::timestamptz END,
|
|
$13, $13, $13)
|
|
ON CONFLICT (id) DO UPDATE SET
|
|
region = EXCLUDED.region,
|
|
phone_country_code = CASE WHEN EXCLUDED.phone <> '' THEN EXCLUDED.phone_country_code ELSE users.phone_country_code END,
|
|
phone = CASE WHEN EXCLUDED.phone <> '' THEN EXCLUDED.phone ELSE users.phone END,
|
|
email = CASE WHEN EXCLUDED.email <> '' THEN EXCLUDED.email ELSE users.email END,
|
|
name = CASE WHEN EXCLUDED.name <> '' THEN EXCLUDED.name ELSE users.name END,
|
|
avatar_url = CASE WHEN EXCLUDED.avatar_url <> '' THEN EXCLUDED.avatar_url ELSE users.avatar_url END,
|
|
password_hash = CASE WHEN EXCLUDED.password_hash <> '' THEN EXCLUDED.password_hash ELSE users.password_hash END,
|
|
wechat_open_id = CASE WHEN EXCLUDED.wechat_open_id <> '' THEN EXCLUDED.wechat_open_id ELSE users.wechat_open_id END,
|
|
wechat_union_id = CASE WHEN EXCLUDED.wechat_union_id <> '' THEN EXCLUDED.wechat_union_id ELSE users.wechat_union_id END,
|
|
google_subject = CASE WHEN EXCLUDED.google_subject <> '' THEN EXCLUDED.google_subject ELSE users.google_subject END,
|
|
status = EXCLUDED.status,
|
|
phone_verified_at = CASE WHEN EXCLUDED.phone <> '' THEN EXCLUDED.phone_verified_at ELSE users.phone_verified_at END,
|
|
email_verified_at = CASE WHEN EXCLUDED.email <> '' THEN EXCLUDED.email_verified_at ELSE users.email_verified_at END,
|
|
last_login_at = EXCLUDED.last_login_at,
|
|
updated_at = EXCLUDED.updated_at
|
|
RETURNING id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status
|
|
`, toPGUUID(user.ID), user.Region, countryCode, phone, normalizeEmail(user.Email), user.Name, user.AvatarURL, user.PasswordHash, user.WechatOpenID, user.WechatUnionID, user.GoogleSubject, activeStatus(user.Status), now)
|
|
return scanUser(row)
|
|
}
|
|
|
|
func (s *PostgresStore) UpdateUserProfile(ctx context.Context, userID string, patch ProfilePatch) (User, error) {
|
|
name := pgtype.Text{}
|
|
if patch.Name != nil {
|
|
name = pgtype.Text{String: strings.TrimSpace(*patch.Name), Valid: true}
|
|
}
|
|
avatarURL := pgtype.Text{}
|
|
if patch.AvatarURL != nil {
|
|
avatarURL = pgtype.Text{String: strings.TrimSpace(*patch.AvatarURL), Valid: true}
|
|
}
|
|
row := s.pool.QueryRow(ctx, `
|
|
UPDATE users
|
|
SET name = CASE WHEN $2::text IS NULL THEN name ELSE $2::text END,
|
|
avatar_url = CASE WHEN $3::text IS NULL THEN avatar_url ELSE $3::text END,
|
|
updated_at = NOW()
|
|
WHERE id = $1
|
|
RETURNING id, region, phone_country_code, phone, email, name, avatar_url, password_hash, wechat_open_id, wechat_union_id, google_subject, status
|
|
`, toPGUUID(userID), name, avatarURL)
|
|
return scanUser(row)
|
|
}
|
|
|
|
func (s *PostgresStore) CreateVerificationCode(ctx context.Context, code VerificationCode) error {
|
|
_, err := s.pool.Exec(ctx, `
|
|
INSERT INTO auth_verification_codes (id, region, channel, target, purpose, code_hash, attempts, expires_at, created_at)
|
|
VALUES ($1, $2, $3, $4, $5, $6, 0, $7, NOW())
|
|
`, code.ID, code.Region, code.Channel, code.Target, code.Purpose, code.CodeHash, code.ExpiresAt)
|
|
return err
|
|
}
|
|
|
|
func (s *PostgresStore) FindActiveVerificationCode(ctx context.Context, region string, channel string, target string, purpose string) (VerificationCode, error) {
|
|
row := s.pool.QueryRow(ctx, `
|
|
SELECT id, region, channel, target, purpose, code_hash, attempts, expires_at, consumed_at
|
|
FROM auth_verification_codes
|
|
WHERE region = $1 AND channel = $2 AND target = $3 AND purpose = $4 AND consumed_at IS NULL
|
|
ORDER BY created_at DESC
|
|
LIMIT 1
|
|
`, region, channel, target, purpose)
|
|
var code VerificationCode
|
|
var consumedAt *time.Time
|
|
if err := row.Scan(&code.ID, &code.Region, &code.Channel, &code.Target, &code.Purpose, &code.CodeHash, &code.Attempts, &code.ExpiresAt, &consumedAt); err != nil {
|
|
if errors.Is(err, pgx.ErrNoRows) {
|
|
return VerificationCode{}, design.ErrNotFound
|
|
}
|
|
return VerificationCode{}, err
|
|
}
|
|
code.ConsumedAt = consumedAt
|
|
return code, nil
|
|
}
|
|
|
|
func (s *PostgresStore) MarkVerificationCodeConsumed(ctx context.Context, id string, consumedAt time.Time) error {
|
|
_, err := s.pool.Exec(ctx, `UPDATE auth_verification_codes SET consumed_at = $2 WHERE id = $1`, id, consumedAt)
|
|
return err
|
|
}
|
|
|
|
func (s *PostgresStore) IncrementVerificationCodeAttempts(ctx context.Context, id string) error {
|
|
_, err := s.pool.Exec(ctx, `UPDATE auth_verification_codes SET attempts = attempts + 1 WHERE id = $1`, id)
|
|
return err
|
|
}
|
|
|
|
func (s *PostgresStore) Close() error {
|
|
if s == nil || s.pool == nil {
|
|
return nil
|
|
}
|
|
s.pool.Close()
|
|
return nil
|
|
}
|
|
|
|
func (s *PostgresStore) findUser(ctx context.Context, query string, args ...any) (User, error) {
|
|
return scanUser(s.pool.QueryRow(ctx, query, args...))
|
|
}
|
|
|
|
type rowScanner interface {
|
|
Scan(dest ...any) error
|
|
}
|
|
|
|
func scanUser(row rowScanner) (User, error) {
|
|
var id pgtype.UUID
|
|
var user User
|
|
if err := row.Scan(&id, &user.Region, &user.CountryCode, &user.Phone, &user.Email, &user.Name, &user.AvatarURL, &user.PasswordHash, &user.WechatOpenID, &user.WechatUnionID, &user.GoogleSubject, &user.Status); err != nil {
|
|
if errors.Is(err, pgx.ErrNoRows) {
|
|
return User{}, design.ErrNotFound
|
|
}
|
|
return User{}, err
|
|
}
|
|
user.ID = fromPGUUID(id)
|
|
return user, nil
|
|
}
|
|
|
|
func toPGUUID(id string) pgtype.UUID {
|
|
parsed, err := uuid.Parse(normalizeUUID(id))
|
|
if err != nil {
|
|
parsed = uuid.MustParse(design.DefaultUserID)
|
|
}
|
|
return pgtype.UUID{Bytes: parsed, Valid: true}
|
|
}
|
|
|
|
func fromPGUUID(value pgtype.UUID) string {
|
|
if !value.Valid {
|
|
return design.DefaultUserID
|
|
}
|
|
return uuid.UUID(value.Bytes).String()
|
|
}
|