add forget password

internal/repository/crypto/init.go

@@ -23,6 +23,8 @@ type CryptoConfig interface {
 	AccessTokenOrderSecret() string
 	AccessTokenOrderExpiresDate() time.Time
 	AccessTokenExpiresDate() time.Time
+	AccessTokenResetPasswordSecret() string
+	AccessTokenResetPasswordExpire() time.Time
 }
 
 type CryptoImpl struct {
@@ -83,6 +85,30 @@ func (c *CryptoImpl) GenerateJWT(user *entity.User) (string, error) {
 	return token, nil
 }
 
+func (c *CryptoImpl) GenerateJWTReseetPassword(user *entity.User) (string, error) {
+	claims := &entity.JWTAuthClaims{
+		StandardClaims: jwt.StandardClaims{
+			Subject:   strconv.FormatInt(user.ID, 10),
+			ExpiresAt: c.Config.AccessTokenResetPasswordExpire().Unix(),
+			IssuedAt:  time.Now().Unix(),
+			NotBefore: time.Now().Unix(),
+		},
+		UserID: user.ID,
+		Name:   user.Name,
+		Email:  user.Email,
+	}
+
+	token, err := jwt.
+		NewWithClaims(jwt.SigningMethodHS256, claims).
+		SignedString([]byte(c.Config.AccessTokenResetPasswordSecret()))
+
+	if err != nil {
+		return "", err
+	}
+
+	return token, nil
+}
+
 func (c *CryptoImpl) ParseAndValidateJWT(tokenString string) (*entity.JWTAuthClaims, error) {
 	token, err := jwt.ParseWithClaims(tokenString, &entity.JWTAuthClaims{}, func(token *jwt.Token) (interface{}, error) {
 		return []byte(c.Config.AccessTokenSecret()), nil
@@ -140,3 +166,23 @@ func (c *CryptoImpl) ValidateJWTOrder(tokenString string) (int64, int64, error)
 
 	return claims.PartnerID, claims.OrderID, nil
 }
+
+func (c *CryptoImpl) ValidateResetPassword(tokenString string) (int64, error) {
+	token, err := jwt.ParseWithClaims(tokenString, &entity.JWTOrderClaims{}, func(token *jwt.Token) (interface{}, error) {
+		if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
+			return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
+		}
+		return []byte(c.Config.AccessTokenResetPasswordSecret()), nil
+	})
+
+	if err != nil {
+		return 0, err
+	}
+
+	claims, ok := token.Claims.(*entity.JWTAuthClaims)
+	if !ok || !token.Valid {
+		return 0, fmt.Errorf("invalid token %v", token.Header["alg"])
+	}
+
+	return claims.UserID, nil
+}