Move endpoint categories into their own packages

api/account/common.go

@@ -0,0 +1,30 @@
+package account
+
+import (
+	"regexp"
+
+	"golang.org/x/crypto/argon2"
+)
+
+type GenericAuthRequest struct {
+	Username string `json:"username"`
+	Password string `json:"password"`
+}
+
+type GenericAuthResponse struct {
+	Token string `json:"token"`
+}
+
+const (
+	ArgonTime     = 1
+	ArgonMemory   = 256 * 1024
+	ArgonThreads  = 4
+	ArgonKeySize  = 32
+	ArgonSaltSize = 16
+)
+
+var isValidUsername = regexp.MustCompile(`^\w{1,16}$`).MatchString
+
+func deriveArgon2IDKey(password, salt []byte) []byte {
+	return argon2.IDKey(password, salt, ArgonTime, ArgonMemory, ArgonThreads, ArgonKeySize)
+}

api/account/info.go

@@ -0,0 +1,39 @@
+package account
+
+import (
+	"fmt"
+	"os"
+	"strconv"
+	"time"
+
+	"github.com/pagefaultgames/pokerogue-server/defs"
+)
+
+type InfoResponse struct {
+	Username        string `json:"username"`
+	LastSessionSlot int    `json:"lastSessionSlot"`
+}
+
+// /account/info - get account info
+func Info(username string, uuid []byte) (InfoResponse, error) {
+	var latestSave time.Time
+	latestSaveID := -1
+	for id := range defs.SessionSlotCount {
+		fileName := "session"
+		if id != 0 {
+			fileName += strconv.Itoa(id)
+		}
+
+		stat, err := os.Stat(fmt.Sprintf("userdata/%x/%s.pzs", uuid, fileName))
+		if err != nil {
+			continue
+		}
+
+		if stat.ModTime().After(latestSave) {
+			latestSave = stat.ModTime()
+			latestSaveID = id
+		}
+	}
+
+	return InfoResponse{Username: username, LastSessionSlot: latestSaveID}, nil
+}

api/account/login.go

@@ -0,0 +1,51 @@
+package account
+
+import (
+	"bytes"
+	"crypto/rand"
+	"database/sql"
+	"encoding/base64"
+	"fmt"
+
+	"github.com/pagefaultgames/pokerogue-server/db"
+)
+
+type LoginRequest GenericAuthRequest
+type LoginResponse GenericAuthResponse
+
+// /account/login - log into account
+func Login(request LoginRequest) (LoginResponse, error) {
+	if !isValidUsername(request.Username) {
+		return LoginResponse{}, fmt.Errorf("invalid username")
+	}
+
+	if len(request.Password) < 6 {
+		return LoginResponse{}, fmt.Errorf("invalid password")
+	}
+
+	key, salt, err := db.FetchAccountKeySaltFromUsername(request.Username)
+	if err != nil {
+		if err == sql.ErrNoRows {
+			return LoginResponse{}, fmt.Errorf("account doesn't exist")
+		}
+
+		return LoginResponse{}, err
+	}
+
+	if !bytes.Equal(key, deriveArgon2IDKey([]byte(request.Password), salt)) {
+		return LoginResponse{}, fmt.Errorf("password doesn't match")
+	}
+
+	token := make([]byte, TokenSize)
+	_, err = rand.Read(token)
+	if err != nil {
+		return LoginResponse{}, fmt.Errorf("failed to generate token: %s", err)
+	}
+
+	err = db.AddAccountSession(request.Username, token)
+	if err != nil {
+		return LoginResponse{}, fmt.Errorf("failed to add account session")
+	}
+
+	return LoginResponse{Token: base64.StdEncoding.EncodeToString(token)}, nil
+}

api/account/logout.go

@@ -0,0 +1,26 @@
+package account
+
+import (
+	"database/sql"
+	"fmt"
+
+	"github.com/pagefaultgames/pokerogue-server/db"
+)
+
+// /account/logout - log out of account
+func Logout(token []byte) error {
+	if len(token) != TokenSize {
+		return fmt.Errorf("invalid token")
+	}
+
+	err := db.RemoveSessionFromToken(token)
+	if err != nil {
+		if err == sql.ErrNoRows {
+			return fmt.Errorf("token not found")
+		}
+
+		return fmt.Errorf("failed to remove account session")
+	}
+
+	return nil
+}

api/account/register.go

@@ -0,0 +1,45 @@
+package account
+
+import (
+	"crypto/rand"
+	"fmt"
+
+	"github.com/pagefaultgames/pokerogue-server/db"
+)
+
+const (
+	UUIDSize  = 16
+	TokenSize = 32
+)
+
+type RegisterRequest GenericAuthRequest
+
+// /account/register - register account
+func Register(request RegisterRequest) error {
+	if !isValidUsername(request.Username) {
+		return fmt.Errorf("invalid username")
+	}
+
+	if len(request.Password) < 6 {
+		return fmt.Errorf("invalid password")
+	}
+
+	uuid := make([]byte, UUIDSize)
+	_, err := rand.Read(uuid)
+	if err != nil {
+		return fmt.Errorf("failed to generate uuid: %s", err)
+	}
+
+	salt := make([]byte, ArgonSaltSize)
+	_, err = rand.Read(salt)
+	if err != nil {
+		return fmt.Errorf(fmt.Sprintf("failed to generate salt: %s", err))
+	}
+
+	err = db.AddAccountRecord(uuid, request.Username, deriveArgon2IDKey([]byte(request.Password), salt), salt)
+	if err != nil {
+		return fmt.Errorf("failed to add account record: %s", err)
+	}
+
+	return nil
+}