Chirpy has been visited %d times!
`, hits)) } } func resetMetricsHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { if cfg.platform != "dev" { httpResponse.JSONHandler(w, http.StatusForbidden, `{"error": "Forbidden!"}`) return } err := cfg.db.DeleteAllUser(context.Background()) if err != nil { httpResponse.SomethingWentWrong(w) return } cfg.fileserverHits.Store(0) httpResponse.PlainTextHandler(w, http.StatusOK, "Metrics Reset") } } func fileServerHandler() http.Handler { fileServer := http.FileServer(http.Dir("./public")) return http.StripPrefix("/app", fileServer) } func getAllChirpsHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { q := r.URL.Query().Get("author_id") sort := r.URL.Query().Get("sort") fmt.Println(sort) var chirps []database.Chirp var err error var id uuid.UUID if len(q) == 0 { chirps, err = cfg.db.GetAllChirps(context.Background()) if err != nil { httpResponse.SomethingWentWrong(w) return } } else { id, err = uuid.Parse(q) if err != nil { httpResponse.SomethingWentWrong(w) return } chirps, err = cfg.db.GetChirpsByUserID(context.Background(), id) if err != nil { httpResponse.SomethingWentWrong(w) return } } data := make([]dataMaps.Chirp, 0) for _, chirp := range chirps { data = append(data, dataMaps.Chirp{ ID: chirp.ID, CreatedAt: chirp.CreatedAt, UpdatedAt: chirp.UpdatedAt, Body: chirp.Body, UserID: chirp.UserID, }) } if sort == "desc" { slices.SortFunc(data, func(a, b dataMaps.Chirp) int { if b.CreatedAt.After(a.CreatedAt) { return 1 } if b.CreatedAt.Before(a.CreatedAt) { return -1 } return 0 }) } jsonData, err := json.Marshal(data) if err != nil { httpResponse.SomethingWentWrong(w) } httpResponse.PlainTextHandler(w, http.StatusOK, string(jsonData)) } } func getChirpByIDHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { chirpID, err := uuid.Parse(r.PathValue("chirpID")) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "InvalidChirpID"}`) return } chirp, err := cfg.db.GetChirpByID(context.Background(), chirpID) if err != nil { httpResponse.JSONHandler(w, http.StatusNotFound, `{"error": "ChirpNotFound"}`) return } data := dataMaps.Chirp{ ID: chirp.ID, CreatedAt: chirp.CreatedAt, UpdatedAt: chirp.UpdatedAt, Body: chirp.Body, UserID: chirp.UserID, } jsonData, err := json.Marshal(data) if err != nil { httpResponse.SomethingWentWrong(w) return } httpResponse.PlainTextHandler(w, http.StatusOK, string(jsonData)) } } func deleteChirpByIDHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { token, err := auth.GetBearerToken(r.Header) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } userId, err := auth.ValidateJWT(token, cfg.secret) _, err = cfg.db.GetUserByID(context.Background(), userId) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } chirpID, err := uuid.Parse(r.PathValue("chirpID")) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "InvalidChirpID"}`) return } chirp, err := cfg.db.GetChirpByID(context.Background(), chirpID) if err != nil { httpResponse.JSONHandler(w, http.StatusNotFound, `{"error": "ChirpNotFound"}`) return } if chirp.UserID != userId { httpResponse.JSONHandler(w, http.StatusForbidden, `{"error": "Forbidden"}`) return } err = cfg.db.DeleteChirpByID(context.Background(), chirp.ID) if err != nil { httpResponse.SomethingWentWrong(w) return } httpResponse.PlainTextHandler(w, http.StatusNoContent, "") } } func polkaWebhookHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { key, err := auth.GetAPIKey(r.Header) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } if key != cfg.polkaKey { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } type polkaWebhook struct { Event string `json:"event"` Data struct { UserId string `json:"user_id"` } `json:"data"` } data := polkaWebhook{} err = json.NewDecoder(r.Body).Decode(&data) if err != nil { httpResponse.SomethingWentWrong(w) return } if data.Event != "user.upgraded" { httpResponse.JSONHandler(w, http.StatusNoContent, "") return } userID, err := uuid.Parse(data.Data.UserId) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "InvalidUserID"}`) return } _, err = cfg.db.GetUserByID(context.Background(), userID) if err != nil { httpResponse.JSONHandler(w, http.StatusNotFound, `{"error": "UserNotFound"}`) return } err = cfg.db.UpgradeUserToChirpyRed(context.Background(), userID) if err != nil { httpResponse.SomethingWentWrong(w) return } httpResponse.PlainTextHandler(w, http.StatusNoContent, "") } } func updateUserDatahandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { type parameters struct { Password string `json:"password"` Email string `json:"email"` } token, err := auth.GetBearerToken(r.Header) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } userId, err := auth.ValidateJWT(token, cfg.secret) _, err = cfg.db.GetUserByID(context.Background(), userId) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } params := parameters{} err = json.NewDecoder(r.Body).Decode(¶ms) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "Failed to parse request body"}`) return } hashedPassword, err := auth.HashPassword(params.Password) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, `{"error": "Failed to hash password"}`) return } user, err := cfg.db.UpdateUserEmailAndPassword(context.Background(), database.UpdateUserEmailAndPasswordParams{ Email: params.Email, HashedPassword: hashedPassword, ID: userId, }) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } userJSON := dataMaps.User{ ID: user.ID, CreatedAt: user.CreatedAt, UpdatedAt: user.UpdatedAt, Email: user.Email, IsChirpyRed: user.IsChirpyRed, } jsonData, err := json.Marshal(userJSON) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } httpResponse.JSONHandler(w, http.StatusOK, string(jsonData)) } } func postChirpsHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { type parameters struct { Body string `json:"body"` } token, err := auth.GetBearerToken(r.Header) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } userId, err := auth.ValidateJWT(token, cfg.secret) params := parameters{} err = json.NewDecoder(r.Body).Decode(¶ms) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "Failed to parse request body"}`) return } _, err = cfg.db.GetUserByID(context.Background(), userId) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } chirp, err := validateChirp(params.Body) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } newChirp, err := cfg.db.CreateChirp(context.Background(), database.CreateChirpParams{ Body: chirp, UserID: userId, }) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } chirpJSON := dataMaps.Chirp{ ID: newChirp.ID, CreatedAt: newChirp.CreatedAt, UpdatedAt: newChirp.UpdatedAt, Body: newChirp.Body, UserID: newChirp.UserID, } jsonData, err := json.Marshal(chirpJSON) if err != nil { httpResponse.SomethingWentWrong(w) return } httpResponse.JSONHandler(w, http.StatusCreated, string(jsonData)) } } func refreshTokenHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { token, err := auth.GetBearerToken(r.Header) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } find, err := cfg.db.GetRefreshTokenByToken(context.Background(), token) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } _, err = cfg.db.GetUserByID(context.Background(), find.UserID) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } if find.RevokedAt.Valid { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } newToken, err := auth.MakeJWT(find.UserID, cfg.secret, time.Duration(3600)*time.Second) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } httpResponse.JSONHandler(w, http.StatusOK, fmt.Sprintf(`{"token": "%s"}`, newToken)) } } func revokeRefreshTokenHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { token, err := auth.GetBearerToken(r.Header) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } find, err := cfg.db.GetRefreshTokenByToken(context.Background(), token) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Unauthorized"}`) return } err = cfg.db.RevokeRefreshTokenByToken(context.Background(), find.Token) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } httpResponse.JSONHandler(w, http.StatusNoContent, "") } } func loginHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { type parameters struct { Email string `json:"email"` Password string `json:"password"` } params := parameters{} err := json.NewDecoder(r.Body).Decode(¶ms) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "Failed to parse request body"}`) return } user, err := cfg.db.GetUserByEmail(context.Background(), params.Email) if err != nil { httpResponse.JSONHandler(w, http.StatusNotFound, `{"error": "UserNotFound"}`) return } err = auth.CheckPasswordHash(params.Password, user.HashedPassword) if err != nil { httpResponse.JSONHandler(w, http.StatusUnauthorized, `{"error": "Incorrect email or password"}`) return } userJSON := dataMaps.UserWithToken{ ID: user.ID, CreatedAt: user.CreatedAt, UpdatedAt: user.UpdatedAt, Email: user.Email, IsChirpyRed: user.IsChirpyRed, } expiresIn := time.Duration(3600) * time.Second userJSON.Token, err = auth.MakeJWT(user.ID, cfg.secret, expiresIn) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } userJSON.RefreshToken, err = auth.MakeRefreshToken() if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } _, err = cfg.db.CreateRefreshToken(context.Background(), database.CreateRefreshTokenParams{ Token: userJSON.RefreshToken, UserID: userJSON.ID, ExpiresAt: time.Now().UTC().Add(time.Duration(60*24*3600) * time.Second), }) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } jsonData, err := json.Marshal(userJSON) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } httpResponse.JSONHandler(w, http.StatusOK, string(jsonData)) } } func postUsersHandler(cfg *apiConfig) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { type parameters struct { Email string `json:"email"` Password string `json:"password"` } params := parameters{} err := json.NewDecoder(r.Body).Decode(¶ms) if err != nil { httpResponse.JSONHandler(w, http.StatusBadRequest, `{"error": "Failed to parse request body"}`) return } hash, err := auth.HashPassword(params.Password) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } usr, err := cfg.db.CreateUser(context.Background(), database.CreateUserParams{ Email: params.Email, HashedPassword: hash, }) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "Failed to create user", "message": "%s"}`, err.Error())) return } userJSON := dataMaps.User{ ID: usr.ID, CreatedAt: usr.CreatedAt, UpdatedAt: usr.UpdatedAt, Email: usr.Email, IsChirpyRed: usr.IsChirpyRed, } jsonData, err := json.Marshal(userJSON) if err != nil { httpResponse.JSONHandler(w, http.StatusInternalServerError, fmt.Sprintf(`{"error": "%s"}`, err.Error())) return } httpResponse.JSONHandler(w, http.StatusCreated, string(jsonData)) } } func validateChirp(chirp string) (string, error) { profaneWords := []string{"kerfuffle", "sharbert", "fornax"} if len(chirp) > 140 { return "", fmt.Errorf("chirp is too long") } for _, word := range profaneWords { re := regexp.MustCompile(`(?i)\b` + regexp.QuoteMeta(word) + `\b`) chirp = re.ReplaceAllString(chirp, "****") } return chirp, nil } func main() { err := godotenv.Load() if err != nil { log.Fatal("Error loading .env file") } apiCfg := &apiConfig{} dbURL := os.Getenv("DB_URL") apiCfg.platform = os.Getenv("PLATFORM") apiCfg.secret = os.Getenv("SECRET") apiCfg.polkaKey = os.Getenv("POLKA_KEY") db, err := sql.Open("postgres", dbURL) if err != nil { log.Fatal(err) } dbQueries := database.New(db) apiCfg.db = *dbQueries mux := http.NewServeMux() mux.HandleFunc("GET /api/healthz", readinessHandler) mux.HandleFunc("GET /api/metrics", metricsHandler(apiCfg)) mux.HandleFunc("POST /api/reset", resetMetricsHandler(apiCfg)) mux.HandleFunc("POST /api/users", postUsersHandler(apiCfg)) mux.HandleFunc("POST /api/login", loginHandler(apiCfg)) mux.HandleFunc("POST /api/refresh", refreshTokenHandler(apiCfg)) mux.HandleFunc("POST /api/revoke", revokeRefreshTokenHandler(apiCfg)) mux.HandleFunc("POST /api/chirps", postChirpsHandler(apiCfg)) mux.HandleFunc("GET /api/chirps", getAllChirpsHandler(apiCfg)) mux.HandleFunc("GET /api/chirps/{chirpID}", getChirpByIDHandler(apiCfg)) mux.HandleFunc("DELETE /api/chirps/{chirpID}", deleteChirpByIDHandler(apiCfg)) mux.HandleFunc("POST /api/polka/webhooks", polkaWebhookHandler(apiCfg)) mux.HandleFunc("PUT /api/users", updateUserDatahandler(apiCfg)) mux.HandleFunc("GET /admin/metrics", adminMetricsHandler(apiCfg)) mux.HandleFunc("POST /admin/reset", resetMetricsHandler(apiCfg)) mux.Handle("/app/", apiCfg.middlewareMetricsInc(fileServerHandler())) server := &http.Server{ Addr: ":8080", Handler: mux, } // Start the server if err := server.ListenAndServe(); err != nil { panic(err) } }