-first commit

exthernal-accountingwep-api/src/services/loginservice.js

@@ -0,0 +1,122 @@
+import bcrypt from 'bcrypt'
+import { GeneralService } from '../share/generalservice.js'
+import { generateToken } from '../utils/token.js'
+// ===================================================
+// 📦 LoginService Class
+// ===================================================
+export class LoginService {
+  // ===================================================
+  // Zone 1️⃣ : Declaration & Constructor
+  // ===================================================
+  constructor() {
+    this.generalService = new GeneralService()
+  }
+
+  // ===================================================
+  // 🔹 Verify Login — Username/Password
+  // ===================================================
+  async verifyLogin(database, username, password) {
+    this.generalService.devhint(2, 'loginservice.js', `verifyLogin() start for username=${username}`)
+
+    // Zone 1️⃣ : Declaration
+    let user = null
+    let token = null
+
+    // Zone 2️⃣ : Query user
+    let sql = `
+      SELECT usrseq, usrnam, usrrol, usrpwd, usrthinam, usrthilstnam
+      FROM ${database}.usrmst
+      WHERE usrnam = $1
+    `
+    let params = [username] // ✅ ห้ามลืมเด็ดขาด
+    const rows = await this.generalService.executeQueryParam(database, sql, params)
+    this.generalService.devhint(3, 'loginservice.js', `query done, found=${rows.length}`)
+
+    if (rows.length === 0) {
+      this.generalService.devhint(2, 'loginservice.js', 'no user found')
+      return null
+    }
+
+    // Zone 3️⃣ : Validate password
+    user = rows[0]
+    const match = await bcrypt.compare(password, user.usrpwd)
+    if (!match) {
+      this.generalService.devhint(2, 'loginservice.js', 'password mismatch')
+      return null
+    }
+
+    // Zone 4️⃣ : Generate JWT Token
+    token = generateToken({
+      id: user.usrseq,
+      name: user.usrnam,
+      role: user.usrrol,
+      organization: database
+    })
+    this.generalService.devhint(2, 'loginservice.js', 'token generated successfully')
+
+    // Zone 5️⃣ : Return Raw Result
+    return {
+      token,
+      ...user
+    }
+  }
+
+  // ===================================================
+  // 🔹 Login ผ่าน Biometric
+  // ===================================================
+  async loginWithBiometric(database, biometric_id) {
+    this.generalService.devhint(2, 'loginservice.js', `loginWithBiometric() start for biometric_id=${biometric_id}`)
+
+    // Zone 1️⃣ : Declaration
+    let sql = ''
+    let params = []
+
+    // Zone 2️⃣ : Query
+    sql = `
+      SELECT usrid, usrnam, usrrol
+      FROM ${database}.usrmst
+      WHERE biometric_id = $1
+    `
+    params = [biometric_id]
+    const rows = await this.generalService.executeQueryParam(database, sql, params)
+    if (rows.length === 0) {
+      this.generalService.devhint(2, 'loginservice.js', 'no biometric found')
+      return null
+    }
+
+    // Zone 3️⃣ : Generate Token
+    const user = rows[0]
+    const token = generateToken({
+      id: user.usrid,
+      name: user.usrnam,
+      role: user.usrrol,
+      organization: database
+    })
+
+    this.generalService.devhint(2, 'loginservice.js', 'biometric token generated')
+    return { token, user }
+  }
+
+  // ===================================================
+  // 🔹 Register Biometric (หลัง login)
+  // ===================================================
+  async registerBiometric(database, usrid, biometric_id) {
+    this.generalService.devhint(2, 'loginservice.js', `registerBiometric() start user=${usrid}`)
+
+    // Zone 1️⃣ : Declaration
+    let sql = ''
+    let params = []
+
+    // Zone 2️⃣ : Query
+    sql = `
+      UPDATE ${database}.usrmst
+      SET biometric_id = $1
+      WHERE usrid = $2
+    `
+    params = [biometric_id, usrid]
+    await this.generalService.executeQueryParam(database, sql, params)
+
+    this.generalService.devhint(2, 'loginservice.js', 'biometric registered')
+    return { message: 'Biometric registered successfully' }
+  }
+}