Merge pull request #50 from traP-jp/feat/#18-post-reset-password

POST /reset-password を実装

src/handler.rs

@@ -17,7 +17,8 @@ pub fn make_router(app_state: Repository) -> Router {
         .route(
             "/reset-password/request",
             post(authentication::reset_password_request),
-        );
+        )
+        .route("/reset-password", post(authentication::reset_password));
 
     let users_router = Router::new()
         .route("/me", get(users::get_me).put(users::put_me))

src/handler/authentication.rs

@@ -201,3 +201,41 @@ https://link/{jwt}"
 
     Ok(StatusCode::CREATED)
 }
+
+#[derive(Deserialize)]
+pub struct ResetPassword {
+    password: String,
+    token: String,
+}
+
+impl Validator for ResetPassword {
+    fn validate(&self) -> anyhow::Result<()> {
+        RuleType::Password.validate(&self.password)?;
+        Ok(())
+    }
+}
+
+pub async fn reset_password(
+    State(state): State<Repository>,
+    Json(body): Json<ResetPassword>,
+) -> Result<StatusCode, StatusCode> {
+    body.validate().map_err(|_| StatusCode::BAD_REQUEST)?;
+
+    let email = state
+        .get_email_by_email_jwt(&body.token)
+        .await
+        .map_err(|_| StatusCode::UNAUTHORIZED)?;
+
+    let user = state
+        .get_user_by_email(&email)
+        .await
+        .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?
+        .ok_or(StatusCode::UNAUTHORIZED)?;
+
+    state
+        .update_user_password(user.id, &body.password)
+        .await
+        .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?;
+
+    Ok(StatusCode::NO_CONTENT)
+}