a06673b
use axum::extract::State;
use axum_extra::extract::cookie::CookieJar;
use crate::error::AuthError;
use crate::features::AuthService;
use export::data::{AppRequest, AppRequestData, AppResponseData};
use super::super::cookies;
#[utoipa::path(
post,
path = "/auth/email/verify",
tag = "auth",
request_body = AppRequestData<crate::features::email_code::types::VerifyCodeCmd>,
responses(
(status = 200, description = "Code verified; the verification-code row id is returned.", body = AppResponseData<crate::features::email_code::types::VerifyCodeResult>),
(status = 400, description = "Invalid code, missing temp_key cookie, or expired.", body = super::super::openapi::ErrorBody),
(status = 401, description = "Unauthorized.", body = super::super::openapi::ErrorBody),
(status = 429, description = "Rate limited.", body = super::super::openapi::ErrorBody),
),
)]
pub(crate) async fn handler(
State(svc): State<AuthService>,
jar: CookieJar,
cmd: AppRequest<crate::features::email_code::types::VerifyCodeCmd>,
) -> Result<
(
CookieJar,
AppResponseData<crate::features::email_code::types::VerifyCodeResult>,
),
AuthError,
> {
let cmd = cmd.into_inner();
let purpose = cmd.purpose;
let email = cmd.email;
let user_id = cmd.user_id;
let code = cmd.code;
let temp_key_value = cmd.temp_key_value;
let cookie_name = crate::features::email_code::usecase::cookie_name(
&svc.config.cookie_name_prefix,
purpose,
&email,
);
let result = svc
.verify_verification_code(&email, user_id, purpose, &code, &temp_key_value)
.await?;
let jar = cookies::remove_cookie(jar, &cookie_name);
Ok((jar, AppResponseData::ok(result)))
}