login.go

type LoginCreds struct {
	Password string `json:"password"`
	Email    string `json:"email"`
}

func (h *Handler) UserLogin(w http.ResponseWriter, req *http.Request) {
	input := LoginCreds{}
	dec := json.NewDecoder(req.Body)
	if err := dec.Decode(&input); err != nil {
		http.Error(w, "email and password not satisfied", http.StatusBadRequest)
		return
	}

	hashedPass := hasher.HashAndSalt(input.Password)
	u := h.users.GetByInputCredentials(input.Email, hashedPass)
	if u == nil {
		w.WriteHeader(http.StatusUnauthorized)
		http.Error(w, "user not found", http.StatusUnauthorized)
		return
	}

	if !hasher.EqualPasswords(hashedPass, u.PasswordHash()) {
		http.Error(w, "password bad", http.StatusUnauthorized)
		return
	}

	if !u.Activated() {
		http.Error(w, "user not activated", http.StatusUnauthorized)
		return
	}

	h.writePairTokenResponse(w, u)
}