Update API

modules/auth/handler/auth_handler.go

@@ -0,0 +1,72 @@
+package handler
+
+import (
+	"BE-MiniERP/database"
+	"BE-MiniERP/modules/auth/models"
+	"BE-MiniERP/modules/auth/repository"
+	"BE-MiniERP/modules/auth/service"
+
+	"github.com/gofiber/fiber/v2"
+)
+
+type AuthHandler struct {
+	Repo *repository.UserRepository
+}
+
+func NewAuthHandler() *AuthHandler {
+	return &AuthHandler{
+		Repo: repository.NewUserRepository(database.DB),
+	}
+}
+
+func (h *AuthHandler) Register(c *fiber.Ctx) error {
+	var input struct {
+		Username string `json:"username"`
+		Password string `json:"password"`
+		Role     string `json:"role"`
+	}
+
+	if err := c.BodyParser(&input); err != nil {
+		return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "invalid input"})
+	}
+
+	hash, err := service.HashPassword(input.Password)
+	if err != nil {
+		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "failed to hash password"})
+	}
+
+	user := &models.User{
+		Username:     input.Username,
+		PasswordHash: hash,
+		Role:         input.Role,
+	}
+
+	if err := h.Repo.Create(user); err != nil {
+		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "failed to create user"})
+	}
+
+	return c.JSON(fiber.Map{"message": "user registered"})
+}
+
+func (h *AuthHandler) Login(c *fiber.Ctx) error {
+	var input struct {
+		Username string `json:"username"`
+		Password string `json:"password"`
+	}
+
+	if err := c.BodyParser(&input); err != nil {
+		return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "invalid input"})
+	}
+
+	user, err := h.Repo.FindByUsername(input.Username)
+	if err != nil || !service.CheckPasswordHash(input.Password, user.PasswordHash) {
+		return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "invalid credentials"})
+	}
+
+	token, err := service.GenerateJWT(user.ID, user.Role)
+	if err != nil {
+		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "failed to generate token"})
+	}
+
+	return c.JSON(fiber.Map{"token": token, "role": user.Role})
+}

modules/auth/models/user.go

@@ -0,0 +1,12 @@
+package models
+
+import "time"
+
+type User struct {
+	ID           uint   `gorm:"primaryKey" json:"id"`
+	Username     string `gorm:"unique" json:"username"`
+	PasswordHash string `json:"-"`
+	Role         string `json:"role"` // admin, sales, warehouse, etc
+	CreatedAt    time.Time
+	UpdatedAt    time.Time
+}

modules/auth/repository/user_repo.go

@@ -0,0 +1,25 @@
+package repository
+
+import (
+	"BE-MiniERP/modules/auth/models"
+
+	"gorm.io/gorm"
+)
+
+type UserRepository struct {
+	DB *gorm.DB
+}
+
+func NewUserRepository(db *gorm.DB) *UserRepository {
+	return &UserRepository{DB: db}
+}
+
+func (r *UserRepository) Create(user *models.User) error {
+	return r.DB.Create(user).Error
+}
+
+func (r *UserRepository) FindByUsername(username string) (*models.User, error) {
+	var user models.User
+	result := r.DB.Where("username = ?", username).First(&user)
+	return &user, result.Error
+}

modules/auth/routes.go

@@ -0,0 +1,13 @@
+package auth
+
+import (
+	"BE-MiniERP/modules/auth/handler"
+
+	"github.com/gofiber/fiber/v2"
+)
+
+func RegisterRoutes(r fiber.Router) {
+	h := handler.NewAuthHandler()
+	r.Post("/register", h.Register)
+	r.Post("/login", h.Login)
+}

modules/auth/service/auth_logic.go

@@ -0,0 +1,15 @@
+package service
+
+import (
+	"golang.org/x/crypto/bcrypt"
+)
+
+func HashPassword(password string) (string, error) {
+	bytes, err := bcrypt.GenerateFromPassword([]byte(password), 14)
+	return string(bytes), err
+}
+
+func CheckPasswordHash(password, hash string) bool {
+	err := bcrypt.CompareHashAndPassword([]byte(hash), []byte(password))
+	return err == nil
+}

modules/auth/service/jwt.go

@@ -0,0 +1,27 @@
+package service
+
+import (
+	"time"
+
+	"github.com/golang-jwt/jwt/v4"
+)
+
+var jwtKey = []byte("supersecret") // sebaiknya dari env
+
+type Claims struct {
+	UserID uint   `json:"user_id"`
+	Role   string `json:"role"`
+	jwt.RegisteredClaims
+}
+
+func GenerateJWT(userID uint, role string) (string, error) {
+	claims := &Claims{
+		UserID: userID,
+		Role:   role,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(24 * time.Hour)),
+		},
+	}
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	return token.SignedString(jwtKey)
+}