finserv, branch authPersonal finances serverhttps://cgit.xengineering.eu/finserv/atom/?h=auth2026-06-27T19:52:31ZAdd NewToken()2026-06-27T19:52:31Zxengineeringme@xengineering.eu2026-06-27T19:47:51Zurn:sha1:94f5bcd677c5c3c6032e3d2973b416644df55e42
This creates a new token for session management.
Switch Register() and Authenticate() to sql.Tx2026-06-27T19:21:45Zxengineeringme@xengineering.eu2026-06-27T19:21:45Zurn:sha1:132990e985751e40c263224a62983c8013409a36
Using sql.Tx (database transactions) instead of a plain database has the
advantage that the caller can wrap multiple library calls into one
transaction.
This guarantees that no database entries change between the library
calls which is critical to prevent race conditions.
Add core functionality of /api/authenticate2026-06-27T18:47:36Zxengineeringme@xengineering.eu2026-06-27T18:47:36Zurn:sha1:ea4bd88963724c13f7b906d856af2d1c715fc056
This handler now actually validates the username and password and
returns a matching HTTP response code.
Harmonize function names further2026-06-22T18:11:39Zxengineeringme@xengineering.eu2026-06-22T18:11:39Zurn:sha1:485fb6556eed127c59e52915ec2984ee84c8210bsql: migrations: Add 0003.sqlite32026-06-22T18:10:50Zxengineeringme@xengineering.eu2026-06-22T18:09:08Zurn:sha1:56dd6588503908d9a562445c1cb6a99c2a7aa415
This adds persistence for tokens.
Remove registration handler2026-06-22T18:10:43Zxengineeringme@xengineering.eu2026-06-22T17:57:20Zurn:sha1:a4535e0aa3e103f87bae6c3f1a1527588e60208c
This should be an admin-only task which should maybe be done via command
line on the server.
Remove wrong auth call2026-06-22T17:56:41Zxengineeringme@xengineering.eu2026-06-22T17:56:41Zurn:sha1:188d40cc52329e55afbb3a55be2b94057bedb339Use only string-based input output for HTTP tests2026-06-21T12:36:47Zxengineeringme@xengineering.eu2026-06-21T12:36:47Zurn:sha1:2009b9726e2aac595a186063deb729df0d7cd850
The API should only communicate via UTF-8 encoded text. Requiring by
default makes test case notation easier and improves scalability.
Name HTTP handlers based on intended paths2026-06-21T12:33:43Zxengineeringme@xengineering.eu2026-06-21T12:33:43Zurn:sha1:20f56806b405f3d33f3db2f419e02a3361d99296Add authenticate HTTP handler2026-06-21T12:33:19Zxengineeringme@xengineering.eu2026-06-21T11:30:06Zurn:sha1:97516f00e4206823f8c4485449f0080823ac5e35Add `register` HTTP handler2026-06-21T09:55:44Zxengineeringme@xengineering.eu2026-06-21T09:49:42Zurn:sha1:7ab03af3f662c90b1868f5ef14e70f443b2d91cd
This allows users to register.
Fix wrong error message2026-06-21T08:53:35Zxengineeringme@xengineering.eu2026-06-21T08:53:35Zurn:sha1:383cf7a521f7bfcdf552cd18ea9919930af2e9cfDo not use init for HTTP handler registration2026-06-21T08:49:11Zxengineeringme@xengineering.eu2026-06-21T08:49:11Zurn:sha1:2dc210a7ee7272f241f6d159ccca01c4da4228d2
This does not allow to use a *sql.DB which is initialized in main()
inside to pass it to handlers with DB access.
Add TestHTTPVersion2026-06-20T20:30:36Zxengineeringme@xengineering.eu2026-06-20T20:30:36Zurn:sha1:b4950dfa73802afb63009f3ef501463baf5c30e2
This introduces the first HTTP test.
Add integration test TestRegisterAuthenticate2026-06-20T15:12:18Zxengineeringme@xengineering.eu2026-06-20T15:10:09Zurn:sha1:bbf9efa82e96761f93b591e1a159ef7afb1f05c0
This makes sure the implementations of Register() and Authenticate() are
compatible.
Add Authenticate()2026-06-20T15:12:18Zxengineeringme@xengineering.eu2026-06-20T15:07:47Zurn:sha1:a5c8467bbb14731847cdf8c37cbde0c91827022a
This function validates a username and password against the database.
Format password.go2026-06-20T15:12:14Zxengineeringme@xengineering.eu2026-06-20T15:01:36Zurn:sha1:6c0aaac6975bdee1596df5b72c1e47e6a923c79fAdd Register()2026-06-20T15:10:39Zxengineeringme@xengineering.eu2026-06-05T20:45:01Zurn:sha1:0143b6e4cb7c31abee7d71a2dbd713abcc98936d
This function creates a new user and sets the username and bcrypt-hashed
password.
sql: migrations: Add 0002.sqlite32026-06-20T12:08:03Zxengineeringme@xengineering.eu2026-06-05T20:39:17Zurn:sha1:3934137fa15737145094ec4607de82e5b3dbf063
This migrations adds a `users` table with id, username and
password_bcrypt.
This allows basic user management and authentication.
go.mod: Use braces2026-06-20T12:08:03Zxengineeringme@xengineering.eu2026-06-20T11:57:13Zurn:sha1:5d581f1526437b4dde8d16600883958cb47eec73
This makes the file less repetitive and diffs more readable.
Add golang.org/x/crypto2026-06-05T20:30:01Zxengineeringme@xengineering.eu2026-06-05T20:29:50Zurn:sha1:4ec2d77a60dd5242c428537c0d3e719954a3bb45
This is required to have bcrypt hashing to hash passwords.
Add global db variable and open connection to it2026-06-05T19:01:52Zxengineeringme@xengineering.eu2026-06-05T18:59:27Zurn:sha1:3395bc1cd32698897385596022e0c855765b48f2
This allows any handler to access the database via a global variable.
The connection is closed when the run function finishes.
Add TestTransaction2026-06-02T18:27:05Zxengineeringme@xengineering.eu2026-06-02T18:27:05Zurn:sha1:3ad3565c64ed1ce692c0509d8fe5a7530f8fb7e3
This makes sure the assumption is correct that everything inside a
transaction is rolled back if the transaction fails.
Add TestUserVersion2026-06-02T18:20:17Zxengineeringme@xengineering.eu2026-06-02T18:20:17Zurn:sha1:a3009e165c4cdbf94eb23a071d5e6c39425539e8
This is partially redundant to MigrateToLatest. Nevertheless a layered
testing approach is useful to detect low-level problems in test
functions which are simple.
Name tests like functions to test2026-06-02T18:12:53Zxengineeringme@xengineering.eu2026-06-02T18:12:53Zurn:sha1:975349b50e3d2c76564fef686a2a33b01212b6d3
This enforces a similar structure of test functions named `TestFooBar`
if they test the function `FooBar`.
Add MigrateToLatest2026-06-02T17:52:18Zxengineeringme@xengineering.eu2026-06-02T17:52:18Zurn:sha1:a750aa4ecf7ecab519b53d7f3ac082425ba50686
This function will be used most by the production software to update
the database schema to the latest known version.
Remove success logging in tests2026-06-02T17:40:55Zxengineeringme@xengineering.eu2026-06-02T17:40:55Zurn:sha1:bd1ead99fd53ad8c3c016b59d67f5bf58ade5095
In case the test succeeds it is not required to log anything. This only
adds noise to the output.
Add UserVersion()2026-05-31T19:37:16Zxengineeringme@xengineering.eu2026-05-31T19:34:44Zurn:sha1:29ae857b5ca13fa12f1d07d4a30597ff9ce28767
This function gets the user_version SQLite3 field describing which
migration was the last executed one.
A test checking this before applying any migrations and after each
migration is included.
Add migration execution2026-05-31T19:37:13Zxengineeringme@xengineering.eu2026-05-31T19:20:48Zurn:sha1:efb324070827bd1fe713b93f80c601551d246579
This adds the execution of the embedded migrations and adds a suitable
unit test.
Add migration reading2026-05-31T18:48:51Zxengineeringme@xengineering.eu2026-05-31T16:13:15Zurn:sha1:4cb6a5952f341741ef2728fb39acb7f19de61ba9
This prepares the infrastructure to place migration SQL code in the
source repository with paths formatted as `sql/migrations/%04d.sqlite3`.
The numbers need to be counting up from 1.
They are embedded with Go's embed package and are parsed into a slice of
strings where the migration number minus one is the slice index and the
value is the migrations file as string.
This makes handling of migrations in code as easy as possible.
This commit adds also tests for this functionality.