Method loginHandler

internal/controller/user_controller.go:50–168

(c *gin.Context)

}

func (controller *UserController) loginHandler(c *gin.Context) {
	var req LoginRequest

	err := c.ShouldBindJSON(&req)
	if err != nil {
		tlog.App.Error().Err(err).Msg("Failed to bind JSON")
		c.JSON(400, gin.H{
			"status":  400,
			"message": "Bad Request",
		})
		return
	}

	tlog.App.Debug().Str("username", req.Username).Msg("Login attempt")

	isLocked, remaining := controller.auth.IsAccountLocked(req.Username)

	if isLocked {
		tlog.App.Warn().Str("username", req.Username).Msg("Account is locked due to too many failed login attempts")
		tlog.AuditLoginFailure(c, req.Username, "username", "account locked")
		c.Writer.Header().Add("x-tinyauth-lock-locked", "true")
		c.Writer.Header().Add("x-tinyauth-lock-reset", time.Now().Add(time.Duration(remaining)*time.Second).Format(time.RFC3339))
		c.JSON(429, gin.H{
			"status":  429,
			"message": fmt.Sprintf("Too many failed login attempts. Try again in %d seconds", remaining),
		})
		return
	}

	userSearch := controller.auth.SearchUser(req.Username)

	if userSearch.Type == "unknown" {
		tlog.App.Warn().Str("username", req.Username).Msg("User not found")
		controller.auth.RecordLoginAttempt(req.Username, false)
		tlog.AuditLoginFailure(c, req.Username, "username", "user not found")
		c.JSON(401, gin.H{
			"status":  401,
			"message": "Unauthorized",
		})
		return
	}

	if !controller.auth.VerifyUser(userSearch, req.Password) {
		tlog.App.Warn().Str("username", req.Username).Msg("Invalid password")
		controller.auth.RecordLoginAttempt(req.Username, false)
		tlog.AuditLoginFailure(c, req.Username, "username", "invalid password")
		c.JSON(401, gin.H{
			"status":  401,
			"message": "Unauthorized",
		})
		return
	}

	tlog.App.Info().Str("username", req.Username).Msg("Login successful")
	tlog.AuditLoginSuccess(c, req.Username, "username")

	controller.auth.RecordLoginAttempt(req.Username, true)