d5939db
use axum::extract::{Extension, State};
use crate::error::AuthError;
use crate::features::AuthService;
use crate::features::login::types::{LoginCmd, LoginResp};
use export::data::{AppRequest, AppRequestData, AppResponseData};
#[utoipa::path(
post,
path = "/auth/login",
tag = "auth",
request_body = AppRequestData<LoginCmd>,
responses(
(status = 200, description = "Authenticated. Returns access/refresh tokens and a public user view.", body = AppResponseData<LoginResp>),
(status = 400, description = "Validation / PoW failure.", body = super::openapi::ErrorBody),
(status = 401, description = "Invalid credentials.", body = super::openapi::ErrorBody),
(status = 403, description = "Account forbidden.", body = super::openapi::ErrorBody),
(status = 429, description = "Rate limited.", body = super::openapi::ErrorBody),
),
)]
pub(crate) async fn handler(
State(svc): State<AuthService>,
cid: Option<Extension<rate_limit::ClientId>>,
cmd: AppRequest<LoginCmd>,
) -> Result<AppResponseData<LoginResp>, AuthError> {
let resp = svc.login(cmd.into_inner(), cid.map(|c| c.0 .0)).await?;
Ok(AppResponseData::ok(resp))
}