Phase 3: Implement user login

backend/pcmod/pom.xml

@@ -19,6 +19,7 @@
   <properties>
     <java.version>25</java.version>
     <testcontainers.version>1.21.4</testcontainers.version>
+    <jjwt.version>0.12.6</jjwt.version>
   </properties>
 
   <dependencies>
@@ -44,6 +45,26 @@
       <artifactId>spring-boot-starter-security</artifactId>
     </dependency>
 
+    <dependency>
+      <groupId>io.jsonwebtoken</groupId>
+      <artifactId>jjwt-api</artifactId>
+      <version>${jjwt.version}</version>
+    </dependency>
+
+    <dependency>
+      <groupId>io.jsonwebtoken</groupId>
+      <artifactId>jjwt-impl</artifactId>
+      <version>${jjwt.version}</version>
+      <scope>runtime</scope>
+    </dependency>
+
+    <dependency>
+      <groupId>io.jsonwebtoken</groupId>
+      <artifactId>jjwt-jackson</artifactId>
+      <version>${jjwt.version}</version>
+      <scope>runtime</scope>
+    </dependency>
+
     <dependency>
       <groupId>com.mysql</groupId>
       <artifactId>mysql-connector-j</artifactId>

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/controller/UsersRestController.java

@@ -0,0 +1,43 @@
+package es.codeurjcstudents.pcmod.controller;
+
+import java.security.Principal;
+import java.util.NoSuchElementException;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import es.codeurjcstudents.pcmod.dto.UserDTO;
+import es.codeurjcstudents.pcmod.dto.UserMapper;
+import es.codeurjcstudents.pcmod.model.User;
+import es.codeurjcstudents.pcmod.service.UsersService;
+import jakarta.servlet.http.HttpServletRequest;
+
+@RestController
+@RequestMapping("/api/v1/users")
+public class UsersRestController {
+
+  @Autowired
+  UsersService usersService;
+
+  @Autowired
+  UserMapper userMapper;
+
+  @GetMapping("/me")
+  public UserDTO me(HttpServletRequest request) {
+
+    Principal principal = request.getUserPrincipal();
+
+    if (principal != null) {
+
+      User user = usersService.getUser(Long.parseLong(principal.getName())).orElseThrow();
+      return userMapper.toDTO(user);
+
+    } else {
+
+      throw new NoSuchElementException();
+
+    }
+  }
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/controller/auth/LoginRestController.java

@@ -0,0 +1,43 @@
+package es.codeurjcstudents.pcmod.controller.auth;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.CookieValue;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import es.codeurjcstudents.pcmod.security.jwt.AuthResponse;
+import es.codeurjcstudents.pcmod.security.jwt.AuthResponse.Status;
+import es.codeurjcstudents.pcmod.security.jwt.LoginRequest;
+import es.codeurjcstudents.pcmod.security.jwt.UserLoginService;
+import jakarta.servlet.http.HttpServletResponse;
+
+@RestController
+@RequestMapping("/api/v1/auth")
+public class LoginRestController {
+
+  @Autowired
+  private UserLoginService userService;
+
+  @PostMapping("/login")
+  public ResponseEntity<AuthResponse> login(
+      @RequestBody LoginRequest loginRequest,
+      HttpServletResponse response) {
+
+    return userService.login(response, loginRequest);
+  }
+
+  @PostMapping("/refresh")
+  public ResponseEntity<AuthResponse> refreshToken(
+      @CookieValue(name = "RefreshToken", required = false) String refreshToken, HttpServletResponse response) {
+
+    return userService.refresh(response, refreshToken);
+  }
+
+  @PostMapping("/logout")
+  public ResponseEntity<AuthResponse> logOut(HttpServletResponse response) {
+    return ResponseEntity.ok(new AuthResponse(Status.SUCCESS, userService.logout(response)));
+  }
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/dto/UserDTO.java

@@ -0,0 +1,13 @@
+package es.codeurjcstudents.pcmod.dto;
+
+import java.util.List;
+
+public record UserDTO(
+    Long id,
+    String name,
+    String surname,
+    String username,
+    String address,
+    String email,
+    List<String> roles) {
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/dto/UserMapper.java

@@ -0,0 +1,12 @@
+package es.codeurjcstudents.pcmod.dto;
+
+import org.mapstruct.Mapper;
+
+import es.codeurjcstudents.pcmod.model.User;
+
+@Mapper(componentModel = "spring")
+public interface UserMapper {
+
+  UserDTO toDTO(User user);
+
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/model/User.java

@@ -0,0 +1,125 @@
+package es.codeurjcstudents.pcmod.model;
+
+import java.util.List;
+
+import jakarta.persistence.CascadeType;
+import jakarta.persistence.ElementCollection;
+import jakarta.persistence.Entity;
+import jakarta.persistence.FetchType;
+import jakarta.persistence.GeneratedValue;
+import jakarta.persistence.GenerationType;
+import jakarta.persistence.Id;
+import jakarta.persistence.OneToOne;
+
+@Entity(name = "UserTable")
+public class User {
+
+  @Id
+  @GeneratedValue(strategy = GenerationType.AUTO)
+  private Long id;
+
+  private String name;
+
+  private String surname;
+
+  private String username;
+
+  private String email;
+
+  private String encodedPassword;
+
+  private String address;
+
+  @OneToOne(cascade = CascadeType.ALL)
+  private Image image;
+
+  @ElementCollection(fetch = FetchType.EAGER)
+  private List<String> roles;
+
+  public User() {
+  }
+
+  public User(String name, String surname, String username, String address, String email, String encodedPassword,
+      String... roles) {
+    this.name = name;
+    this.surname = surname;
+    this.username = username;
+    this.address = address;
+    this.email = email;
+    this.encodedPassword = encodedPassword;
+    this.roles = List.of(roles);
+  }
+
+  public Long getId() {
+    return id;
+  }
+
+  public void setId(Long id) {
+    this.id = id;
+  }
+
+  public String getName() {
+    return name;
+  }
+
+  public void setName(String name) {
+    this.name = name;
+  }
+
+  public String getSurname() {
+    return surname;
+  }
+
+  public void setSurname(String surname) {
+    this.surname = surname;
+  }
+
+  public String getUsername() {
+    return username;
+  }
+
+  public void setUsername(String username) {
+    this.username = username;
+  }
+
+  public String getAddress() {
+    return address;
+  }
+
+  public void setAddress(String address) {
+    this.address = address;
+  }
+
+  public String getEmail() {
+    return email;
+  }
+
+  public void setEmail(String email) {
+    this.email = email;
+  }
+
+  public String getEncodedPassword() {
+    return encodedPassword;
+  }
+
+  public void setEncodedPassword(String encodedPassword) {
+    this.encodedPassword = encodedPassword;
+  }
+
+  public Image getImage() {
+    return image;
+  }
+
+  public void setImage(Image image) {
+    this.image = image;
+  }
+
+  public List<String> getRoles() {
+    return roles;
+  }
+
+  public void setRoles(List<String> roles) {
+    this.roles = roles;
+  }
+
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/repository/UsersRepository.java

@@ -0,0 +1,13 @@
+package es.codeurjcstudents.pcmod.repository;
+
+import java.util.Optional;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+
+import es.codeurjcstudents.pcmod.model.User;
+
+public interface UsersRepository extends JpaRepository<User, Long> {
+
+  Optional<User> findByEmail(String email);
+
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/security/CSRFHandlerConfiguration.java

@@ -0,0 +1,36 @@
+package es.codeurjcstudents.pcmod.security;
+
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.web.csrf.CsrfToken;
+import org.springframework.web.servlet.HandlerInterceptor;
+import org.springframework.web.servlet.ModelAndView;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+public class CSRFHandlerConfiguration implements WebMvcConfigurer {
+
+  @Override
+  public void addInterceptors(InterceptorRegistry registry) {
+    registry.addInterceptor(new CSRFHandlerInterceptor());
+  }
+}
+
+class CSRFHandlerInterceptor implements HandlerInterceptor {
+
+  @Override
+  public void postHandle(final HttpServletRequest request, final HttpServletResponse response, final Object handler,
+      final ModelAndView modelAndView) throws Exception {
+
+    if (modelAndView != null) {
+
+      CsrfToken token = (CsrfToken) request.getAttribute("_csrf");
+      if (token != null) {
+        modelAndView.addObject("token", token.getToken());
+      }
+    }
+  }
+}

backend/pcmod/src/main/java/es/codeurjcstudents/pcmod/security/RepositoryUserDetailsService.java

@@ -0,0 +1,39 @@
+package es.codeurjcstudents.pcmod.security;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+import es.codeurjcstudents.pcmod.model.User;
+import es.codeurjcstudents.pcmod.repository.UsersRepository;
+
+@Service
+public class RepositoryUserDetailsService implements UserDetailsService {
+
+  @Autowired
+  private UsersRepository userRepository;
+
+  @Override
+  public UserDetails loadUserByUsername(String identifier) throws UsernameNotFoundException {
+
+    User user = userRepository.findByEmail(identifier)
+        .orElseGet(() -> userRepository.findById(Long.parseLong(identifier))
+            .orElseThrow(() -> new UsernameNotFoundException("User not found with id or email: " + identifier)));
+
+    List<GrantedAuthority> roles = new ArrayList<>();
+    for (String role : user.getRoles()) {
+      roles.add(new SimpleGrantedAuthority("ROLE_" + role));
+    }
+
+    return new org.springframework.security.core.userdetails.User(user.getId().toString(), user.getEncodedPassword(),
+        roles);
+
+  }
+}