controller

var (
	// Errors
	ErrorUserNotFound      = errors.New("User not found")
	ErrorUserExists        = errors.New("The username, email or phone number already exists")
	ErrorBadCredentials    = errors.New("The username or password is incorrect")
	ErrorUsernameRequired  = errors.New("Username/Email is required")
	ErrorPasswordRequired  = errors.New("Password is required")
	ErrorPublicKeyRequired = errors.New("Public key is required")
	ErrorTotpNotFound      = errors.New("TOTP not set for user")
	ErrorPublicKeyNotFound = errors.New("A public key is not set for this user")
)

var Ctrl = func() Controller {
	controllerOnce.Do(func() {
		var cfg Config
		if err := config.Load(&cfg); err != nil {
			panic(err)
		}
		if cfg.TotpIssuer == "" {
			cfg.TotpIssuer = DefaultTotpIssuer
		}
		ctx := context.Background()
		db, err := database.New(ctx, cfg.DatabaseDialect, cfg.DatabasePath)
		if err != nil {
			panic(fmt.Sprintf(
				"Controller: failed to connect to database at "+
					"address ('%s')",
				cfg.DatabasePath,
			))
		}
		privateKey, publicKey, cert, err := readKeysFromConfig(cfg)
		if err != nil {
			panic(fmt.Sprintf("Controller: %s", err))
		}
		if len(cfg.AuthGrants) > 0 {
			err := grants.SetCustomGrants(cfg.AuthGrants)
			if err != nil {
				panic(fmt.Sprintf("Controller: %s", err))
			}
		}
		middleware.SetAuthPublicKey(publicKey)
		control = New(
			ctx,
			db,
			privateKey,
			publicKey,
			cert,
			cfg.TotpIssuer,
		)
	})
	return control
}

var Routes = []server.Route{
	server.Route{
		Handler:          Login,
		Method:           http.MethodPost,
		Path:             "/users/login",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          SignUp,
		Method:           http.MethodPost,
		Path:             "/users/signup",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          middleware.Authorize(RefreshToken),
		Method:           http.MethodGet,
		Path:             "/users/refresh",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          middleware.Authorize(RegisterPublicKey),
		Method:           http.MethodPost,
		Path:             "/keys",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          LoginWithPublicKey,
		Method:           http.MethodPost,
		Path:             "/keys/login",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          middleware.Authorize(SetTotp),
		Method:           http.MethodPost,
		Path:             "/otp",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          middleware.Authorize(ValidateOtp),
		Method:           http.MethodGet,
		Path:             "/otp/validate/:otp",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          middleware.Authorize(GetOtpQr),
		Method:           http.MethodGet,
		Path:             "/otp/qr",
		ResponseSettings: []server.ResponseSetting{},
	},
	server.Route{
		Handler:          GetJwk,
		Method:           http.MethodGet,
		Path:             "/.well-known/jwks.json",
		ResponseSettings: []server.ResponseSetting{},
	},
}