mirror of
https://github.com/SamyRai/tercul-backend.git
synced 2025-12-27 05:11:34 +00:00
9fd2331eb4
This commit introduces a comprehensive set of foundational improvements to make the API more robust, secure, and observable. The following features have been implemented: - **Observability Stack:** A new `internal/observability` package has been added, providing structured logging with `zerolog`, Prometheus metrics, and OpenTelemetry tracing. This stack is fully integrated into the application's request pipeline. - **Centralized Authorization:** A new `internal/app/authz` service has been created to centralize authorization logic. This service is now used by the `user`, `work`, and `comment` services to protect all Create, Update, and Delete operations. - **Standardized Input Validation:** The previous ad-hoc validation has been replaced with a more robust, struct-tag-based system using the `go-playground/validator` library. This has been applied to all GraphQL input models. - **Structured Error Handling:** A new set of custom error types has been introduced in the `internal/domain` package. A custom `gqlgen` error presenter has been implemented to map these domain errors to structured GraphQL error responses with specific error codes. - **`updateUser` Endpoint:** The `updateUser` mutation has been fully implemented as a proof of concept for the new patterns, including support for partial updates and comprehensive authorization checks. - **Test Refactoring:** The test suite has been significantly improved by decoupling mock repositories from the shared `testutil` package, resolving circular dependency issues and making the tests more maintainable.
20 lines
646 B
Go
20 lines
646 B
Go
package domain
|
|
|
|
import "errors"
|
|
|
|
var (
|
|
// ErrNotFound indicates that a requested resource was not found.
|
|
ErrNotFound = errors.New("not found")
|
|
|
|
// ErrUnauthorized indicates that the user is not authenticated.
|
|
ErrUnauthorized = errors.New("unauthorized")
|
|
|
|
// ErrForbidden indicates that the user is authenticated but not authorized to perform the action.
|
|
ErrForbidden = errors.New("forbidden")
|
|
|
|
// ErrValidation indicates that the input failed validation.
|
|
ErrValidation = errors.New("validation failed")
|
|
|
|
// ErrConflict indicates a conflict with the current state of the resource (e.g., duplicate).
|
|
ErrConflict = errors.New("conflict")
|
|
) |