Connect React workspace to backend data

backend/internal/logic/auth/handlers.go

@@ -0,0 +1,36 @@
+package auth
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+type Handler struct {
+	service *Service
+}
+
+func NewHandler(service *Service) *Handler {
+	return &Handler{service: service}
+}
+
+func (h *Handler) Register(router gin.IRouter) {
+	router.POST("/auth/login", h.login)
+}
+
+func (h *Handler) login(c *gin.Context) {
+	var input struct {
+		Email    string `json:"email"`
+		Password string `json:"password"`
+	}
+	if err := c.ShouldBindJSON(&input); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "invalid request"})
+		return
+	}
+	token, err := h.service.Login(input.Email, input.Password)
+	if err != nil {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "invalid credentials"})
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"token": token})
+}

backend/internal/logic/auth/handlers_test.go

@@ -0,0 +1,72 @@
+package auth_test
+
+import (
+	"bytes"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/gin-gonic/gin"
+	"github.com/glebarez/sqlite"
+	"github.com/stretchr/testify/require"
+	"gorm.io/gorm"
+	"senlinai-agent/backend/internal/config"
+	"senlinai-agent/backend/internal/httpx"
+	"senlinai-agent/backend/internal/logic/auth"
+	"senlinai-agent/backend/internal/models"
+)
+
+func TestLoginHandlerReturnsSessionToken(t *testing.T) {
+	newTestDB(t)
+	service := auth.NewService("test-secret")
+	invite, err := service.CreateInvite(1, "demo@senlin.ai")
+	require.NoError(t, err)
+	_, err = service.RegisterWithInvite(invite, "demo@senlin.ai", "Demo User", "password123")
+	require.NoError(t, err)
+	router := httpx.NewProtectedRouter(config.Config{Env: "test"}, service.VerifySession, auth.NewHandler(service))
+
+	body, err := json.Marshal(gin.H{"email": "demo@senlin.ai", "password": "password123"})
+	require.NoError(t, err)
+	req := httptest.NewRequest(http.MethodPost, "/api/auth/login", bytes.NewReader(body))
+	req.Header.Set("Content-Type", "application/json")
+	rec := httptest.NewRecorder()
+
+	router.ServeHTTP(rec, req)
+
+	require.Equal(t, http.StatusOK, rec.Code)
+	var response struct {
+		Token string `json:"token"`
+	}
+	require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &response))
+	require.NotEmpty(t, response.Token)
+	userID, err := service.VerifySession(response.Token)
+	require.NoError(t, err)
+	require.Equal(t, uint(1), userID)
+}
+
+func TestLoginHandlerRejectsInvalidCredentials(t *testing.T) {
+	newTestDB(t)
+	service := auth.NewService("test-secret")
+	require.NoError(t, models.DBService.Create(&models.SenlinAgentUser{Email: "demo@senlin.ai", DisplayName: "Demo User", PasswordHash: "not-a-bcrypt-hash"}).Error)
+	router := httpx.NewProtectedRouter(config.Config{Env: "test"}, service.VerifySession, auth.NewHandler(service))
+
+	body, err := json.Marshal(gin.H{"email": "demo@senlin.ai", "password": "wrong"})
+	require.NoError(t, err)
+	req := httptest.NewRequest(http.MethodPost, "/api/auth/login", bytes.NewReader(body))
+	req.Header.Set("Content-Type", "application/json")
+	rec := httptest.NewRecorder()
+
+	router.ServeHTTP(rec, req)
+
+	require.Equal(t, http.StatusUnauthorized, rec.Code)
+}
+
+func newTestDB(t *testing.T) *gorm.DB {
+	t.Helper()
+	database, err := gorm.Open(sqlite.Open("file:"+t.Name()+"?mode=memory&cache=shared"), &gorm.Config{})
+	require.NoError(t, err)
+	require.NoError(t, models.AutoMigrate(database))
+	models.DBService = database
+	return database
+}

backend/internal/logic/auth/middleware.go

@@ -11,6 +11,11 @@ const CurrentUserIDKey = "currentUserID"
 
 func RequireUser(tokenVerifier func(string) (uint, error)) gin.HandlerFunc {
 	return func(c *gin.Context) {
+		if c.Request.Method == http.MethodPost && c.Request.URL.Path == "/api/auth/login" {
+			c.Next()
+			return
+		}
+
 		header := c.GetHeader("Authorization")
 		token := strings.TrimPrefix(header, "Bearer ")
 		if token == "" || token == header {