add password login

backend/app/Http/Controllers/AuthController.php

@@ -2,22 +2,118 @@
 
 namespace App\Http\Controllers;
 
+use App\Auth\Clock;
+use App\Auth\CreateSessionDto;
+use App\Auth\SessionRepository;
+use App\Http\Middleware\AuthMiddleware;
+use App\Http\Requests\LoginRequest;
+use App\Shared\ValueObject\EmailAddress;
 use App\User\User;
+use App\User\UserRepository;
+use DateInterval;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Cookie;
 
 class AuthController extends Controller
 {
+    public function login(
+        LoginRequest $request,
+        UserRepository $userRepository,
+        SessionRepository $sessionRepository,
+        Clock $clock,
+    ): JsonResponse
+    {
+        /** @var array{email: string, password: string} $credentials */
+        $credentials = $request->validated();
+        $user = $userRepository->findByCredentials(
+            new EmailAddress($credentials['email']),
+            $credentials['password'],
+        );
+        if ($user === null) {
+            return new JsonResponse(
+                ['error' => 'invalid_credentials'],
+                401,
+            );
+        }
+
+        $sessionLifetime = (int) config('session.lifetime', 120);
+        $createdAt = $clock->now();
+        $expiresAt = $createdAt->add(
+            new DateInterval("PT{$sessionLifetime}M"),
+        );
+        $session = $sessionRepository->create(new CreateSessionDto(
+            token: bin2hex(random_bytes(32)),
+            user: $user,
+            createdAt: $createdAt,
+            expiresAt: $expiresAt,
+        ));
+
+        $response = new JsonResponse([
+            'user' => $this->userPayload($user),
+        ]);
+        $response->headers->setCookie(new Cookie(
+            name: AuthMiddleware::COOKIE_NAME,
+            value: $session->getToken(),
+            expire: $session->getExpiresAt(),
+            path: $this->cookiePath(),
+            domain: $this->cookieDomain(),
+            secure: (bool) config('session.secure', false),
+            httpOnly: true,
+            sameSite: $this->cookieSameSite(),
+        ));
+
+        return $response;
+    }
+
     public function me(Request $request): JsonResponse
     {
         /** @var User $user */
         $user = $request->attributes->get('user');
 
         return new JsonResponse([
-            'user' => [
-                'id' => $user->getId(),
-                'email' => $user->getEmail()->value(),
-            ],
+            'user' => $this->userPayload($user),
         ]);
     }
+
+    /**
+     * @return array{id: int, email: string}
+     */
+    private function userPayload(User $user): array
+    {
+        return [
+            'id' => $user->getId(),
+            'email' => $user->getEmail()->value(),
+        ];
+    }
+
+    private function cookiePath(): string
+    {
+        $path = config('session.path', '/');
+
+        return is_string($path) ? $path : '/';
+    }
+
+    private function cookieDomain(): ?string
+    {
+        $domain = config('session.domain');
+
+        return is_string($domain) ? $domain : null;
+    }
+
+    /**
+     * @return ''|'lax'|'none'|'strict'|null
+     */
+    private function cookieSameSite(): ?string
+    {
+        $sameSite = config('session.same_site', 'lax');
+
+        return match ($sameSite) {
+            '' => '',
+            Cookie::SAMESITE_LAX => Cookie::SAMESITE_LAX,
+            Cookie::SAMESITE_NONE => Cookie::SAMESITE_NONE,
+            Cookie::SAMESITE_STRICT => Cookie::SAMESITE_STRICT,
+            default => null,
+        };
+    }
 }

backend/app/Http/Requests/LoginRequest.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class LoginRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, string>>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => [
+                'required',
+                'string',
+                'email',
+                'max:255',
+            ],
+            'password' => [
+                'required',
+                'string',
+            ],
+        ];
+    }
+
+    protected function prepareForValidation(): void
+    {
+        $email = $this->input('email');
+        if (is_string($email)) {
+            $this->merge(['email' => trim($email)]);
+        }
+    }
+}