New version (#170)

* removed api check on signup

* added recaptcha to signup

* fixed unrelated email issue (#151)

* go-fmt for auth.go

* change goroutine email

* fix subscription status

* update recaptcha

* fix signin email conflict

* little changes

* disabled Recaptcha

* updated Readme

* update go mod

* youtube link (#158)

* added type conv. check

* added RespondWithEncJSON

* changed Decrypt payload

* added helper test

* refactor logins

* update test data

* added test suite

* add env dev to emails

* Refactoring Some Functions (#160)

* refactor bankaccount functions

* refactor creditcard functions

* refactor server functions

* refactor note functions

* deleted recaptcha func (#159)

* TODO about CreateUser fixed (#161)

* create user actions moved to the service layer

* some user tests introduced (#164)

* some user tests introduced
Signed-off-by: Ahmet Turkmen <[email protected]>

* UUID enhancement (#168)

* update mw
* fixed token invalidation

* added validator to app/user (#169)

* fix: add email template

* fix: auth confirmation code

* fix: update subcription process

* fix: add redirect after email confirm

* fix: updare subscription

* change login logic

Co-authored-by: Emre Dipi <[email protected]>
Co-authored-by: Recep Alaca <[email protected]>
Co-authored-by: Fatih Sezgin <[email protected]>
Co-authored-by: Ahmet Türkmen <[email protected]>

Author: 5 people

README.md

@@ -21,7 +21,34 @@ I promise all the coffee you have ordered will be spent on this project
 </p>
 
 ## API Documentation
-API documentation available at [Postman Public Directory](https://documenter.getpostman.com/view/3658426/SzYbyHXj)   
+API documentation available at [Postman Public Directory](https://documenter.getpostman.com/view/3658426/SzYbyHXj)
+
+PassWall has both server and client side encryption. So when creating user to work with Postman you should use already SHA256 encrypted password in JSON or use a Postman Pre-request Script to encrypt json in form. 
+
+**Postman Pre-request Script Usage**  
+While creating a user via Postman, you should send a post request to **/auth/signup** endpoint. In the request use the JSON schema below as **raw body**. Do not change **{{password}}**, it is an environment variable in Postman.
+```json
+{
+    "name": "Erhan Yakut",
+    "email": "[email protected]",
+    "master_password": "{{password}}"
+}
+```
+
+Then in Pre-request Script, copy and paste the javascript code below. You should change the password in the code.
+```javascript
+var newPassword = '123456' // Change this
+
+pm.environment.set('password', newPassword);
+
+var encryptedPassword = CryptoJS.SHA256(pm.environment.get('password')).toString();
+
+pm.environment.set('password',encryptedPassword);
+
+console.log(encryptedPassword);
+```  
+Click on [this link](https://www.youtube.com/watch?v=bFgstpIA3iE&list=PL645jNNONo8TBOBDFRq7SolX_aWCT2Ia9) to visit our Youtube playlist.  
+
 
 ## Database support
 PassWall works with **PostgreSQL** databases. 

cmd/passwall-server/main.go

@@ -27,13 +27,8 @@ func main() {
 
 	s := storage.New(db)
 
-	// Migrate database tables
-	// TODO: Migrate should be in storege.New functions of categories
 	app.MigrateSystemTables(s)
 
-	// Start cron jobs like backup
-	// app.StartCronJob(s)
-
 	srv := &http.Server{
 		MaxHeaderBytes: 10, // 10 MB
 		Addr:           ":" + cfg.Server.Port,

go.mod

@@ -5,22 +5,41 @@ go 1.14
 require (
 	github.com/DATA-DOG/go-sqlmock v1.4.1
 	github.com/Luzifer/go-openssl/v4 v4.1.0
+	github.com/Masterminds/goutils v1.1.1 // indirect
+	github.com/Masterminds/semver v1.5.0 // indirect
+	github.com/Masterminds/sprig v2.22.0+incompatible // indirect
 	github.com/dgrijalva/jwt-go v3.2.0+incompatible
 	github.com/didip/tollbooth v4.0.2+incompatible
 	github.com/go-playground/validator/v10 v10.2.0
 	github.com/go-test/deep v1.0.6
+	github.com/google/uuid v1.2.0 // indirect
 	github.com/gorilla/mux v1.7.4
-	github.com/heroku/x v0.0.22
-	github.com/jinzhu/gorm v1.9.12
+	github.com/huandu/xstrings v1.3.2 // indirect
+	github.com/imdario/mergo v0.3.12 // indirect
+	github.com/jaytaylor/html2text v0.0.0-20200412013138-3577fbdbcff7 // indirect
+	github.com/jinzhu/gorm v1.9.15
+	github.com/matcornic/hermes v1.2.0
+	github.com/mattn/go-runewidth v0.0.10 // indirect
+	github.com/mattn/go-sqlite3 v2.0.1+incompatible // indirect
+	github.com/mitchellh/copystructure v1.1.1 // indirect
+	github.com/olekukonko/tablewriter v0.0.5 // indirect
 	github.com/patrickmn/go-cache v2.1.0+incompatible // indirect
+	github.com/rivo/uniseg v0.2.0 // indirect
 	github.com/satori/go.uuid v1.2.0
 	github.com/sendgrid/rest v2.6.2+incompatible // indirect
 	github.com/sendgrid/sendgrid-go v3.7.0+incompatible
-	github.com/spf13/viper v1.6.2
-	github.com/stretchr/testify v1.5.1
+	github.com/spf13/viper v1.7.1
+	github.com/ssor/bom v0.0.0-20170718123548-6386211fdfcf // indirect
+	github.com/stretchr/testify v1.6.1
 	github.com/urfave/negroni v1.0.0
-	golang.org/x/crypto v0.0.0-20200604202706-70a84ac30bf9
-	golang.org/x/sys v0.0.0-20200420163511-1957bb5e6d1f // indirect
+	golang.org/x/crypto v0.0.0-20210314154223-e6e6c4f2bb5b
+	golang.org/x/net v0.0.0-20210316092652-d523dce5a7f4 // indirect
 	gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect
-	gopkg.in/yaml.v2 v2.2.8
+	gopkg.in/russross/blackfriday.v2 v2.1.0 // indirect
+	gopkg.in/yaml.v2 v2.3.0
+)
+
+replace (
+	gopkg.in/russross/blackfriday.v2 v2.0.1 => github.com/russross/blackfriday/v2 v2.0.1
+	gopkg.in/russross/blackfriday.v2 v2.1.0 => github.com/russross/blackfriday/v2 v2.1.0
 )

go.sum

@@ -0,0 +1,14 @@
+package api
+
+import (
+	"time"
+
+	"github.com/passwall/passwall-server/internal/app"
+	"github.com/patrickmn/go-cache"
+)
+
+var c *cache.Cache
+
+func init() {
+	c = app.CreateCache(time.Minute*5, time.Minute*10)
+}