golang-lib/web/auth/models.go

package auth

import (
	"github.com/google/uuid"
	"golang.org/x/crypto/bcrypt"
	"gorm.io/gorm"
)

// User struct - default User model which could be extended
type User struct {
	ID       uuid.UUID `json:"id" gorm:"type:uuid;default:gen_random_uuid()" example:"88078ec0-2135-445f-bf05-632701c77695"`
	Username string    `json:"username" gorm:"unique" example:"kukoon"`
	Password string    `json:"-" example:"super secret password"`
}

// NewUser by username and password
func NewUser(username, password string) (*User, error) {
	user := &User{
		Username: username,
	}
	if err := user.SetPassword(password); err != nil {
		return nil, err
	}
	return user, nil
}

// SetPassword  - create new hash of password
func (u *User) SetPassword(password string) error {
	p, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
	if err != nil {
		return err
	}
	u.Password = string(p)
	return nil
}

// ValidatePassword - check if given password is equal to saved hash
func (u *User) ValidatePassword(password string) bool {
	err := bcrypt.CompareHashAndPassword([]byte(u.Password), []byte(password))
	return err == nil
}

// HasPermission interface for middleware check in other models
type HasPermission interface {
	HasPermission(tx *gorm.DB, userID, objID uuid.UUID) (interface{}, error)
}