Create basic user auth.

src/app_error.rs

@@ -22,7 +22,10 @@ pub enum AppError {
     InvalidInput(String),
 
     #[error("{0}")]
-    InternalError(String)
+    InternalError(String),
+
+    #[error("Unauthorized")]
+    Auth
 }
 
 impl ResponseError for AppError {
@@ -30,7 +33,8 @@ impl ResponseError for AppError {
         match self {
             AppError::Database(_) => StatusCode::INTERNAL_SERVER_ERROR,
             AppError::InvalidInput(_) => StatusCode::BAD_REQUEST,
-            AppError::InternalError(_) => StatusCode::INTERNAL_SERVER_ERROR
+            AppError::InternalError(_) => StatusCode::INTERNAL_SERVER_ERROR,
+            AppError::Auth => StatusCode::UNAUTHORIZED
         }
     }
 

src/auth.rs

@@ -0,0 +1,14 @@
+use mongodb::Database;
+use actix_web::{HttpRequest, cookie::Cookie};
+
+use crate::models::user::User;
+use crate::app_error::AppError;
+
+pub async fn user_auth(
+    db: &Database,
+    req: &HttpRequest
+) -> Result<Cookie, AppError> {
+    let user_id = req.cookie("user")?.into_owned().value();
+    let user_collection = db.collection::<User>("users");
+    User::find_by_id(&user_collection, user_id).await?
+}

src/controllers/account.rs

@@ -1,8 +1,18 @@
-use actix_web::{post, web, HttpResponse};
+use actix_web::{post, web, HttpResponse, HttpRequest};
+use mongodb::Database;
+
+use crate::models::account::{Account};
+use crate::auth::user_auth;
+use crate::app_error::AppError;
+use crate::dto::account;
 
 #[post("/api/account")]
 pub async fn create_route(
     db: web::Data<Database>,
-    payload: web::Json<NewUserInput>
+    req: HttpRequest,
+    body: web::Json<account::CreateInput>
 ) -> Result<HttpResponse, AppError> {
+    let user = user_auth(&db, &req).await?;
+    let account_collection = db.collection::<Account>("accounts");
+    Ok(HttpResponse::Ok().body("Ok"))
 }

src/dto/account.rs

@@ -0,0 +1,7 @@
+use serde::Deserialize;
+
+#[derive(Deserialize)]
+pub struct CreateInput {
+    pub user: String,
+    pub data: String,
+}

src/dto/mod.rs

@@ -1 +1,2 @@
 pub mod user;
+pub mod account;

src/main.rs

@@ -7,6 +7,7 @@ mod models;
 mod controllers;
 mod dto;
 mod app_error;
+mod auth;
 
 pub static HTML: OnceLock<String> = OnceLock::new();
 

src/models/account.rs

@@ -7,5 +7,5 @@ pub struct Account {
     pub _id: Option<ObjectId>,
     pub user: ObjectId,
     pub data: String,
-    pub created_date: bson::DateTime
+    pub created_date: DateTime
 }

src/models/user.rs

@@ -41,4 +41,13 @@ impl User {
             Err(e) => Err(AppError::Database(e.into()))
         }
     }
+
+    pub async fn find_by_id(collection: &Collection<User>, user_id: String) -> Result<User, AppError> {
+        let object_id = ObjectId::parse_str(id_str)?;
+        match collection.find_one(doc!{"_id", object_id}) {
+            Ok(Some(u)) => Ok(u),
+            Ok(None) => Err(AppError::auth),
+            Err(e) => Err(AppError::Database(e.into()))
+        }
+    }
 }