package account import ( "context" "errors" "feedsystem_video_go/internal/auth" "log" "strconv" "strings" "time" rediscache "feedsystem_video_go/internal/middleware/redis" "github.com/go-sql-driver/mysql" "golang.org/x/crypto/bcrypt" "gorm.io/gorm" ) type AccountService struct { accountRepository *AccountRepository cache *rediscache.Client } var ( ErrUsernameTaken = errors.New("username already exists") ErrNewUsernameRequired = errors.New("new_username is required") ) func NewAccountService(accountRepository *AccountRepository, cache *rediscache.Client) *AccountService { return &AccountService{accountRepository: accountRepository, cache: cache} } func (as *AccountService) CreateAccount(ctx context.Context, account *Account) error { passwordHash, err := bcrypt.GenerateFromPassword([]byte(account.Password), bcrypt.DefaultCost) if err != nil { return err } account.Password = string(passwordHash) if err := as.accountRepository.CreateAccount(ctx, account); err != nil { return err } return nil } func (as *AccountService) Rename(ctx context.Context, accountID uint, newUsername string) (string, error) { if newUsername == "" { return "", ErrNewUsernameRequired } token, err := auth.GenerateToken(accountID, newUsername) if err != nil { return "", err } if err := as.accountRepository.RenameWithToken(ctx, accountID, newUsername, token); err != nil { var mysqlErr *mysql.MySQLError if errors.As(err, &mysqlErr) && mysqlErr.Number == 1062 { return "", ErrUsernameTaken } if errors.Is(err, gorm.ErrRecordNotFound) { return "", err } return "", err } if as.cache != nil { cacheCtx, cancel := context.WithTimeout(ctx, 50*time.Millisecond) defer cancel() if err := as.cache.SetBytes(cacheCtx, as.cache.Key("account:%d", accountID), []byte(token), 24*time.Hour); err != nil { log.Printf("failed to set cache: %v", err) } } return token, nil } func (as *AccountService) ChangePassword(ctx context.Context, username, oldPassword, newPassword string) error { account, err := as.FindByUsername(ctx, username) if err != nil { return err } if err := bcrypt.CompareHashAndPassword([]byte(account.Password), []byte(oldPassword)); err != nil { return err } passwordHash, err := bcrypt.GenerateFromPassword([]byte(newPassword), bcrypt.DefaultCost) if err != nil { return err } if err := as.accountRepository.ChangePassword(ctx, account.ID, string(passwordHash)); err != nil { return err } if err := as.Logout(ctx, account.ID); err != nil { return err } return nil } func (as *AccountService) FindByID(ctx context.Context, id uint) (*Account, error) { if account, err := as.accountRepository.FindByID(ctx, id); err != nil { return nil, err } else { return account, nil } } func (as *AccountService) FindByUsername(ctx context.Context, username string) (*Account, error) { if account, err := as.accountRepository.FindByUsername(ctx, username); err != nil { return nil, err } else { return account, nil } } func (as *AccountService) Login(ctx context.Context, username, password string) (string, string, error) { account, err := as.FindByUsername(ctx, username) if err != nil { return "", "", err } if err := bcrypt.CompareHashAndPassword([]byte(account.Password), []byte(password)); err != nil { return "", "", err } accessToken, err := auth.GenerateToken(account.ID, account.Username) if err != nil { return "", "", err } refreshToken, err := auth.GenerateRefreshToken(account.ID) if err != nil { return "", "", err } if err := as.accountRepository.Login(ctx, account.ID, accessToken, refreshToken); err != nil { return "", "", err } if as.cache != nil { cacheCtx, cancel := context.WithTimeout(ctx, 50*time.Millisecond) defer cancel() if err := as.cache.SetBytes(cacheCtx, as.cache.Key("account:%d", account.ID), []byte(accessToken), 24*time.Hour); err != nil { log.Printf("failed to set cache: %v", err) } if err := as.cache.SetBytes(cacheCtx, as.cache.Key("account:%d:refresh", account.ID), []byte(refreshToken), 7*24*time.Hour); err != nil { log.Printf("failed to set refresh cache: %v", err) } if err := as.cache.SetBytes(cacheCtx, as.cache.Key("refresh:%s", refreshToken), []byte(strconv.FormatUint(uint64(account.ID), 10)), 7*24*time.Hour); err != nil { log.Printf("failed to set refresh lookup: %v", err) } } return accessToken, refreshToken, nil } func (as *AccountService) Logout(ctx context.Context, accountID uint) error { account, err := as.FindByID(ctx, accountID) if err != nil { return err } if account.Token == "" { return nil } if as.cache != nil { cacheCtx, cancel := context.WithTimeout(ctx, 50*time.Millisecond) defer cancel() if err := as.cache.Del(cacheCtx, as.cache.Key("account:%d", account.ID)); err != nil { log.Printf("failed to del cache: %v", err) } if err := as.cache.Del(cacheCtx, as.cache.Key("account:%d:refresh", account.ID)); err != nil { log.Printf("failed to del refresh cache: %v", err) } if account.RefreshToken != "" { if err := as.cache.Del(cacheCtx, as.cache.Key("refresh:%s", account.RefreshToken)); err != nil { log.Printf("failed to del refresh lookup: %v", err) } } } return as.accountRepository.Logout(ctx, account.ID) } func (as *AccountService) UpdateAvatar(ctx context.Context, accountID uint, avatarURL string) error { return as.accountRepository.UpdateAvatar(ctx, accountID, avatarURL) } func (as *AccountService) FindAll(ctx context.Context) ([]*Account, error) { return as.accountRepository.FindAll(ctx) } func (as *AccountService) UpdateProfile(ctx context.Context, accountID uint, req *UpdateProfileRequest) error { updates := map[string]interface{}{} if req.Bio != "" { updates["bio"] = strings.TrimSpace(req.Bio) } if req.AvatarURL != "" { updates["avatar_url"] = strings.TrimSpace(req.AvatarURL) } if len(updates) == 0 { return errors.New("nothing to update") } return as.accountRepository.UpdateFields(ctx, accountID, updates) } func (as *AccountService) RefreshAccessToken(ctx context.Context, refreshToken string) (string, uint, string, error) { if refreshToken == "" { return "", 0, "", errors.New("refresh token is empty") } if as.cache != nil { cacheCtx, cancel := context.WithTimeout(ctx, 50*time.Millisecond) defer cancel() b, err := as.cache.GetBytes(cacheCtx, as.cache.Key("refresh:%s", refreshToken)) if err == nil { idStr := string(b) id, parseErr := strconv.ParseUint(idStr, 10, 64) if parseErr == nil { account, err := as.FindByID(ctx, uint(id)) if err == nil && account != nil && account.RefreshToken == refreshToken { newToken, err := auth.GenerateToken(account.ID, account.Username) if err != nil { return "", 0, "", err } if err := as.accountRepository.UpdateToken(ctx, account.ID, newToken); err != nil { return "", 0, "", err } if err := as.cache.SetBytes(cacheCtx, as.cache.Key("account:%d", account.ID), []byte(newToken), 24*time.Hour); err != nil { log.Printf("failed to set cache: %v", err) } return newToken, account.ID, account.Username, nil } } } } accounts, err := as.FindAll(ctx) if err != nil { return "", 0, "", err } for _, acc := range accounts { if acc.RefreshToken == refreshToken { newToken, err := auth.GenerateToken(acc.ID, acc.Username) if err != nil { return "", 0, "", err } if err := as.accountRepository.UpdateToken(ctx, acc.ID, newToken); err != nil { return "", 0, "", err } return newToken, acc.ID, acc.Username, nil } } return "", 0, "", errors.New("invalid refresh token") }