Initial commit. Working login, example UI with prototype and demo, connections to DB and DAV, local and prod setups.

backend/main.go

@@ -0,0 +1,108 @@
+package main
+
+import (
+	"crussell/auth"
+	"crussell/internal/dav"
+	"fmt"
+	"log"
+	"net/http"
+	"os"
+	"time"
+
+	"github.com/go-chi/chi/v5"
+	"github.com/go-chi/chi/v5/middleware"
+
+	"crussell/db"
+	"crussell/mw"
+
+	authHandlers "crussell/handlers/auth"
+	userHandlers "crussell/handlers/user"
+)
+
+func init() {
+	// 1. Read the environment variable
+	jwtSecret := os.Getenv("JWT_SECRET_KEY")
+
+	// 2. Add a check to ensure the secret is set
+	if jwtSecret == "" {
+		log.Fatal("FATAL: JWT_SECRET_KEY environment variable not set. Application cannot start.")
+	}
+
+	// 3. Use the environment variable for initialization
+	auth.InitJWT(jwtSecret)
+}
+
+func initDB() {
+	if err := db.Connect(); err != nil {
+		log.Fatal("Failed to connect to DB:", err)
+	}
+	fmt.Println("Connected to DB successfully")
+}
+
+func initDav() {
+	if dav.Service == nil {
+		log.Fatal("Failed to initialize DAV service")
+	}
+	fmt.Println("DAV Service connected successfully")
+}
+
+func main() {
+	initDB()
+	initDav()
+
+	r := chi.NewRouter()
+
+	r.Use(middleware.RequestID)                 // Add X-Request-ID header
+	r.Use(middleware.RealIP)                    // Get real IP from headers
+	r.Use(middleware.Logger)                    // Basic logging
+	r.Use(middleware.Recoverer)                 // Panic recovery
+	r.Use(middleware.Timeout(15 * time.Second)) // Request timeout
+
+	r.Use(func(next http.Handler) http.Handler {
+		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			w.Header().Set("X-Content-Type-Options", "nosniff")
+			w.Header().Set("X-Frame-Options", "DENY")
+			w.Header().Set("X-XSS-Protection", "1; mode=block")
+			next.ServeHTTP(w, r)
+		})
+	})
+
+	// Public auth routes
+	r.Post("/api/register", authHandlers.RegisterHandler)
+	r.Post("/api/login", authHandlers.LoginHandler)
+
+	// Protected routes - any authenticated user
+	r.Group(func(r chi.Router) {
+		r.Use(mw.RequireAuth)
+
+		// Auth
+		r.Post("/api/refresh-token", authHandlers.RefreshTokenHandler)
+
+		// User profile
+		r.Get("/api/user/profile", userHandlers.GetProfileHandler)
+		r.Put("/api/user/profile", userHandlers.UpdateProfileHandler)
+		r.Delete("/api/user/account", userHandlers.DeleteAccountHandler)
+
+		// Loyalty
+		r.Get("/api/user/loyalty", userHandlers.GetLoyaltyHandler)
+	})
+
+	// Protected routes - verified users only
+	r.Group(func(r chi.Router) {
+		r.Use(mw.RequireAuth)
+		r.Use(mw.RequireVerified)
+
+		// Add booking routes, etc.
+	})
+
+	// Admin routes
+	r.Group(func(r chi.Router) {
+		r.Use(mw.RequireAuth)
+		r.Use(mw.RequireAdmin)
+
+		// Add admin routes
+	})
+
+	fmt.Println("Server is listening on :8080")
+	http.ListenAndServe(":8080", r)
+}