Stage 2

src/handlers/handler_health.erl

@@ -1,6 +1,7 @@
 -module(handler_health).
+
 -export([init/2]).
 
 init(Req, _Opts) ->
-  {ok, Resp} = cowboy_req:reply(200, #{<<"content-type">> => <<"application/json">>}, <<"{\"status\":\"ok\"}">>, Req),
-  Resp.
+  Body = jsx:encode(#{status => <<"ok">>}),
+  cowboy_req:reply(200, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_login.erl

@@ -0,0 +1,67 @@
+-module(handler_login).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"POST">> ->
+      {ok, Body, Req1} = cowboy_req:read_body(Req),
+      case jsx:decode(Body, [return_maps]) of
+        #{<<"email">> := Email, <<"password">> := Password} ->
+          case core_user:get_by_email(Email) of
+            {ok, User} ->
+              case logic_auth:verify_password(Password, User#user.password_hash) of
+                {ok, true} ->
+                  case User#user.status of
+                    active ->
+                      Token = logic_auth:generate_jwt(User#user.id, User#user.role),
+                      {RefreshToken, ExpiresAt} = logic_auth:generate_refresh_token(User#user.id),
+                      save_refresh_token(User#user.id, RefreshToken, ExpiresAt),
+                      Response = #{
+                        user => #{
+                          id => User#user.id,
+                          email => User#user.email,
+                          role => User#user.role
+                        },
+                        token => Token,
+                        refresh_token => RefreshToken
+                      },
+                      send_json(Req1, 200, Response);
+                    frozen ->
+                      send_error(Req1, 403, <<"Account frozen">>);
+                    deleted ->
+                      send_error(Req1, 403, <<"Account deleted">>)
+                  end;
+                _ ->
+                  send_error(Req1, 401, <<"Invalid credentials">>)
+              end;
+            {error, not_found} ->
+              send_error(Req1, 401, <<"Invalid credentials">>)
+          end;
+        _ ->
+          send_error(Req1, 400, <<"Invalid request body">>)
+      end;
+    _ ->
+      send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+save_refresh_token(UserId, Token, ExpiresAt) ->
+  Session = #session{
+    token = Token,
+    user_id = UserId,
+    expires_at = ExpiresAt,
+    type = refresh
+  },
+  mnesia:dirty_write(Session).
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_refresh.erl

@@ -0,0 +1,91 @@
+-module(handler_refresh).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"POST">> ->
+      {ok, Body, Req1} = cowboy_req:read_body(Req),
+      case jsx:decode(Body, [return_maps]) of
+        #{<<"refresh_token">> := RefreshToken} ->
+          case validate_refresh_token(RefreshToken) of
+            {ok, UserId} ->
+              case core_user:get_by_id(UserId) of
+                {ok, User} ->
+                  % Генерируем новые токены
+                  NewToken = logic_auth:generate_jwt(User#user.id, User#user.role),
+                  {NewRefreshToken, ExpiresAt} = logic_auth:generate_refresh_token(User#user.id),
+
+                  % Сохраняем новый refresh token
+                  save_refresh_token(User#user.id, NewRefreshToken, ExpiresAt),
+
+                  % Удаляем старый refresh token
+                  delete_refresh_token(RefreshToken),
+
+                  Response = #{
+                    token => NewToken,
+                    refresh_token => NewRefreshToken
+                  },
+                  send_json(Req1, 200, Response);
+                {error, not_found} ->
+                  send_error(Req1, 401, <<"User not found">>)
+              end;
+            {error, expired} ->
+              send_error(Req1, 401, <<"Refresh token expired">>);
+            {error, invalid} ->
+              send_error(Req1, 401, <<"Invalid refresh token">>)
+          end;
+        _ ->
+          send_error(Req1, 400, <<"Missing refresh_token">>)
+      end;
+    _ ->
+      send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+validate_refresh_token(Token) ->
+  case get_session_by_token(Token) of
+    {ok, Session} ->
+      % Проверяем срок действия
+      Now = calendar:universal_time(),
+      case Session#session.expires_at > Now of
+        true -> {ok, Session#session.user_id};
+        false -> {error, expired}
+      end;
+    {error, not_found} ->
+      {error, invalid}
+  end.
+
+get_session_by_token(Token) ->
+  Match = #session{token = Token, type = refresh, _ = '_'},
+  case mnesia:dirty_match_object(Match) of
+    [] -> {error, not_found};
+    [Session] -> {ok, Session}
+  end.
+
+save_refresh_token(UserId, Token, ExpiresAt) ->
+  Session = #session{
+    token = Token,
+    user_id = UserId,
+    expires_at = ExpiresAt,
+    type = refresh
+  },
+  mnesia:dirty_write(Session).
+
+delete_refresh_token(Token) ->
+  Match = #session{token = Token, type = refresh, _ = '_'},
+  case mnesia:dirty_match_object(Match) of
+    [] -> ok;
+    [Session] -> mnesia:dirty_delete_object(Session)
+  end.
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_register.erl

@@ -0,0 +1,48 @@
+-module(handler_register).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"POST">> ->
+      {ok, Body, Req1} = cowboy_req:read_body(Req),
+      case jsx:decode(Body, [return_maps]) of
+        #{<<"email">> := Email, <<"password">> := Password} ->
+          case core_user:email_exists(Email) of
+            true ->
+              send_error(Req1, 409, <<"Email already exists">>);
+            false ->
+              case core_user:create(Email, Password) of
+                {ok, User} ->
+                  Token = logic_auth:generate_jwt(User#user.id, User#user.role),
+                  Response = #{
+                    user => #{
+                      id => User#user.id,
+                      email => User#user.email,
+                      role => User#user.role
+                    },
+                    token => Token
+                  },
+                  send_json(Req1, 201, Response);
+                {error, _} ->
+                  send_error(Req1, 500, <<"Internal server error">>)
+              end
+          end;
+        _ ->
+          send_error(Req1, 400, <<"Invalid request body">>)
+      end;
+    _ ->
+      send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).

src/handlers/handler_user_me.erl

@@ -0,0 +1,57 @@
+-module(handler_user_me).
+-include("records.hrl").
+
+-export([init/2]).
+
+init(Req, Opts) ->
+  handle(Req, Opts).
+
+handle(Req, _Opts) ->
+  case cowboy_req:method(Req) of
+    <<"GET">> ->
+      case authenticate(Req) of
+        {ok, UserId, Req1} ->
+          case core_user:get_by_id(UserId) of
+            {ok, User} ->
+              Response = #{
+                id => User#user.id,
+                email => User#user.email,
+                role => User#user.role,
+                status => User#user.status,
+                created_at => User#user.created_at,
+                updated_at => User#user.updated_at
+              },
+              send_json(Req1, 200, Response);
+            {error, not_found} ->
+              send_error(Req1, 404, <<"User not found">>)
+          end;
+        {error, Code, Message, Req1} ->
+          send_error(Req1, Code, Message)
+      end;
+    _ ->
+      send_error(Req, 405, <<"Method not allowed">>)
+  end.
+
+authenticate(Req) ->
+  case cowboy_req:parse_header(<<"authorization">>, Req) of
+    {bearer, Token} ->
+      case logic_auth:verify_jwt(Token) of
+        {ok, Claims} ->
+          UserId = maps:get(<<"user_id">>, Claims),
+          {ok, UserId, Req};
+        {error, expired} ->
+          {error, 401, <<"Token expired">>, Req};
+        {error, _} ->
+          {error, 401, <<"Invalid token">>, Req}
+      end;
+    _ ->
+      {error, 401, <<"Missing or invalid Authorization header">>, Req}
+  end.
+
+send_json(Req, Status, Data) ->
+  Body = jsx:encode(Data),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).
+
+send_error(Req, Status, Message) ->
+  Body = jsx:encode(#{error => Message}),
+  cowboy_req:reply(Status, #{<<"content-type">> => <<"application/json">>}, Body, Req).