Method HandleUpdateMe

internal/auth/auth.go:478–516

(w http.ResponseWriter, r *http.Request)

)

func (ua *UserAuth) HandleUpdateMe(w http.ResponseWriter, r *http.Request) {
	user := ua.AuthenticateRequest(r)
	if user == nil {
		http.Error(w, "not authenticated", http.StatusUnauthorized)
		return
	}

	var req struct {
		Name *string `json:"name"`
	}
	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
		http.Error(w, "invalid JSON body", http.StatusBadRequest)
		return
	}

	if req.Name == nil {
		http.Error(w, "no fields to update", http.StatusBadRequest)
		return
	}

	name := *req.Name
	if name != strings.TrimSpace(name) {
		http.Error(w, "name must not have leading or trailing whitespace", http.StatusBadRequest)
		return
	}
	if len(name) < minDisplayNameLen || len(name) > maxDisplayNameLen {
		http.Error(w, "name must be 1–80 characters", http.StatusBadRequest)
		return
	}

	updated, err := ua.store.UpdateUserName(r.Context(), user.ID, name)
	if err != nil {
		http.Error(w, "failed to update profile", http.StatusInternalServerError)
		return
	}

	w.Header().Set("Content-Type", "application/json")
	writeJSON(w, updated)
}

// AuthenticateRequest extracts the user from the session cookie. Returns nil if not authenticated.
func (ua *UserAuth) AuthenticateRequest(r *http.Request) *identity.User {