mobiniqow
1e5ef02bdf
Messages between matched users are now encrypted client-side with each user's own key pair before they ever reach the server; the backend only ever stores/relays opaque ciphertext + nonce and cannot read message content, including for the last-message preview on the matches list. - User gains a PublicKey field, registered/rotated via PUT /profile/public-key - Message gains CipherText/Nonce; legacy plaintext Text is kept as-is for messages sent before this change - MatchView exposes the partner's public key and the last message's ciphertext/nonce so the client can decrypt previews itself - Removed the now-dead plaintext SanitizeMessageText utility — the server can no longer sanitize message content since it's opaque ciphertext Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
92 lines
2.5 KiB
Go
92 lines
2.5 KiB
Go
package handler
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
"strconv"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"dating-app/internal/dto"
|
|
"dating-app/internal/service"
|
|
"dating-app/internal/utils"
|
|
)
|
|
|
|
type ChatHandler struct {
|
|
chatService *service.ChatService
|
|
}
|
|
|
|
func NewChatHandler(chatService *service.ChatService) *ChatHandler {
|
|
return &ChatHandler{chatService: chatService}
|
|
}
|
|
|
|
// ListMatches GET /matches
|
|
func (h *ChatHandler) ListMatches(c *gin.Context) {
|
|
user, ok := currentUser(c)
|
|
if !ok {
|
|
return
|
|
}
|
|
matches, err := h.chatService.ListMatches(user.ID)
|
|
if err != nil {
|
|
utils.Fail(c, http.StatusInternalServerError, "خطا در دریافت مچها", nil)
|
|
return
|
|
}
|
|
utils.Success(c, http.StatusOK, "", matches)
|
|
}
|
|
|
|
// ListMessages GET /matches/:id/messages
|
|
func (h *ChatHandler) ListMessages(c *gin.Context) {
|
|
user, ok := currentUser(c)
|
|
if !ok {
|
|
return
|
|
}
|
|
matchID, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
utils.Fail(c, http.StatusBadRequest, "شناسه نامعتبر است", nil)
|
|
return
|
|
}
|
|
messages, err := h.chatService.ListMessages(user.ID, uint(matchID))
|
|
if err != nil {
|
|
h.handleError(c, err)
|
|
return
|
|
}
|
|
utils.Success(c, http.StatusOK, "", messages)
|
|
}
|
|
|
|
// SendMessage POST /matches/:id/messages body: {cipher_text, nonce}
|
|
// متن خام پیام هیچوقت اینجا نمیرسه؛ کلاینت قبل از ارسال با کلید عمومی
|
|
// طرف مقابل (NaCl box / X25519) رمزنگاریش کرده.
|
|
func (h *ChatHandler) SendMessage(c *gin.Context) {
|
|
user, ok := currentUser(c)
|
|
if !ok {
|
|
return
|
|
}
|
|
matchID, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
utils.Fail(c, http.StatusBadRequest, "شناسه نامعتبر است", nil)
|
|
return
|
|
}
|
|
var req dto.SendMessageRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
utils.Fail(c, http.StatusBadRequest, "پیام رمزنگاریشده نامعتبر است", err.Error())
|
|
return
|
|
}
|
|
msg, err := h.chatService.SendMessage(user.ID, uint(matchID), req.CipherText, req.Nonce)
|
|
if err != nil {
|
|
h.handleError(c, err)
|
|
return
|
|
}
|
|
utils.Success(c, http.StatusCreated, "", msg)
|
|
}
|
|
|
|
func (h *ChatHandler) handleError(c *gin.Context, err error) {
|
|
switch {
|
|
case errors.Is(err, service.ErrNotMatchMember):
|
|
utils.Fail(c, http.StatusForbidden, err.Error(), nil)
|
|
case errors.Is(err, service.ErrInvalidMessageEncoding):
|
|
utils.Fail(c, http.StatusBadRequest, err.Error(), nil)
|
|
default:
|
|
utils.Fail(c, http.StatusNotFound, "گفتگو یافت نشد", nil)
|
|
}
|
|
}
|