Jul 20, 2025 · Jul 20, 2025 · Jul 20, 2025 · Jul 20, 2025 · Jul 20, 2025 · Jul 20, 2025
diff --git a/lib/src/services/mongodb_verification_code_storage_service.dart b/lib/src/services/mongodb_verification_code_storage_service.dart
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,145 @@
	import 'dart:async';
	import 'dart:math';

	import 'package:ht_api/src/services/verification_code_storage_service.dart';
	import 'package:ht_data_mongodb/ht_data_mongodb.dart';
	import 'package:ht_shared/ht_shared.dart';
	import 'package:logging/logging.dart';
	import 'package:mongo_dart/mongo_dart.dart';

	/// The name of the MongoDB collection for storing verification codes.
	const String kVerificationCodesCollection = 'verification_codes';

	/// {@template mongodb_verification_code_storage_service}
	/// A MongoDB-backed implementation of [VerificationCodeStorageService].
	///
	/// Stores verification codes in a dedicated MongoDB collection with a TTL
	/// index on an `expiresAt` field for automatic cleanup.
	/// {@endtemplate}
	class MongoDbVerificationCodeStorageService
	implements VerificationCodeStorageService {
	/// {@macro mongodb_verification_code_storage_service}
	MongoDbVerificationCodeStorageService({
	required MongoDbConnectionManager connectionManager,
	required Logger log,
	this.codeExpiryDuration = const Duration(minutes: 15),
	}) : _connectionManager = connectionManager,
	_log = log {
	_init();
	}

	final MongoDbConnectionManager _connectionManager;
	final Logger _log;
	final Random _random = Random();

	/// The duration for which generated codes are considered valid.
	final Duration codeExpiryDuration;

	DbCollection get _collection =>
	_connectionManager.db.collection(kVerificationCodesCollection);

	/// Initializes the service by ensuring the TTL index exists.
	Future<void> _init() async {
	try {
	_log.info('Ensuring TTL index exists for verification codes...');
	final command = {
	'createIndexes': kVerificationCodesCollection,
	'indexes': [
	{
	'key': {'expiresAt': 1},
	'name': 'expiresAt_ttl_index',
	'expireAfterSeconds': 0,
	}
	]
	};
	await _connectionManager.db.runCommand(command);
	_log.info('Verification codes TTL index is set up correctly.');
	} catch (e, s) {
	_log.severe(
	'Failed to create TTL index for verification codes collection.',
	e,
	s,
	);
	rethrow;
	}
	}

	String _generateNumericCode({int length = 6}) {
	final buffer = StringBuffer();
	for (var i = 0; i < length; i++) {
	buffer.write(_random.nextInt(10).toString());
	}
	return buffer.toString();
	}

	@override
	Future<String> generateAndStoreSignInCode(String email) async {
	final code = _generateNumericCode();
	final expiresAt = DateTime.now().add(codeExpiryDuration);

	try {
	await _collection.updateOne(
	where.eq('_id', email),
	modify.set('code', code).set('expiresAt', expiresAt),
	upsert: true,
	);
	_log.info(
	'Stored sign-in code for $email (expires: $expiresAt)',
	);
	return code;
	} catch (e) {
	_log.severe('Failed to store sign-in code for $email: $e');
	throw OperationFailedException('Failed to store sign-in code: $e');
	}
fulleni marked this conversation as resolved. Show resolved Hide resolved
	}

	@override
	Future<bool> validateSignInCode(String email, String code) async {
	try {
	final entry = await _collection.findOne(where.id(email));
	if (entry == null) {
	return false; // No code found for this email
	}

	final storedCode = entry['code'] as String?;
	final expiresAt = entry['expiresAt'] as DateTime?;

	if (storedCode != code \|\|
	expiresAt == null \|\|
	DateTime.now().isAfter(expiresAt)) {
	return false; // Code mismatch or expired
	}

	return true;
	} catch (e) {
	_log.severe('Error validating sign-in code for $email: $e');
	throw OperationFailedException('Failed to validate sign-in code: $e');
	}
fulleni marked this conversation as resolved. Show resolved Hide resolved
	}

	@override
	Future<void> clearSignInCode(String email) async {
	try {
	await _collection.deleteOne(where.id(email));
	_log.info('Cleared sign-in code for $email');
	} catch (e) {
	_log.severe('Failed to clear sign-in code for $email: $e');
	throw OperationFailedException('Failed to clear sign-in code: $e');
	}
fulleni marked this conversation as resolved. Show resolved Hide resolved
	}

	@override
	Future<void> cleanupExpiredCodes() async {
	// No-op, handled by TTL index.
	_log.finer(
	'cleanupExpiredCodes() called, but no action is needed due to TTL index.',
	);
	return Future.value();
	}

	@override
	void dispose() {
	// No-op, connection managed by AppDependencies.
	_log.finer('dispose() called, no action needed.');
	}
	}