Sign-In and Sign-Up is successfully done.

Author: manirDev

src/main/java/com/manir/springbootecommercerestapi/config/SecurityConfig.java

@@ -5,6 +5,7 @@
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
 import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -38,6 +39,8 @@ protected void configure(HttpSecurity http) throws Exception {
                 .authorizeRequests()
                 //to permit all get request and secure post put and delete methods
                 .antMatchers(HttpMethod.GET, "/api/**").permitAll()
+                //authorize singIn and signUp
+                .antMatchers("/api/v1/auth/**").permitAll()
                 .anyRequest()
                 .authenticated()
                 .and()
@@ -67,4 +70,11 @@ protected void configure(AuthenticationManagerBuilder auth) throws Exception {
     PasswordEncoder passwordEncoder(){
         return new BCryptPasswordEncoder();
     }
+
+    //User authentication manager bean
+    @Override
+    @Bean
+    public AuthenticationManager authenticationManagerBean() throws Exception {
+        return super.authenticationManagerBean();
+    }
 }

src/main/java/com/manir/springbootecommercerestapi/controller/AuthController.java

@@ -0,0 +1,61 @@
+package com.manir.springbootecommercerestapi.controller;
+
+import com.manir.springbootecommercerestapi.dto.LoginDto;
+import com.manir.springbootecommercerestapi.dto.SignUpDto;
+import com.manir.springbootecommercerestapi.repository.UserRepository;
+import com.manir.springbootecommercerestapi.service.UserRegisterService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+
+
+@RestController
+@RequestMapping(value = "api/v1/auth")
+public class AuthController {
+
+    @Autowired
+    private AuthenticationManager authenticationManager;
+    @Autowired
+    private UserRepository userRepository;
+    @Autowired
+    private UserRegisterService userRegisterService;
+
+    //login api
+    @PostMapping("/login")
+    public ResponseEntity<String> authenticateUser(@RequestBody LoginDto loginDto){
+
+        Authentication authentication = authenticationManager.authenticate(
+                                    new UsernamePasswordAuthenticationToken(
+                                            loginDto.getUserNameOrEmail(),
+                                            loginDto.getPassword()
+                                    )
+                                );
+        SecurityContextHolder.getContext().setAuthentication(authentication);
+        return new ResponseEntity<>("User sign-In successfully", HttpStatus.OK);
+    }
+
+    //register api
+    @PostMapping("/register")
+    public ResponseEntity<?> registerUser(@RequestBody SignUpDto signUpDto){
+
+        //check for username exists in DB
+        if (userRepository.existsByUserName(signUpDto.getUsername())){
+            return new ResponseEntity<>("Username already exists", HttpStatus.BAD_REQUEST);
+        }
+        if (userRepository.existsByEmail(signUpDto.getEmail())){
+            return new ResponseEntity<>("Email already exists", HttpStatus.BAD_REQUEST);
+        }
+        SignUpDto registeredUser = userRegisterService.registerUser(signUpDto);
+        return new ResponseEntity<>("User is successfully registered", HttpStatus.OK);
+    }
+
+}

src/main/java/com/manir/springbootecommercerestapi/dto/LoginDto.java

@@ -0,0 +1,9 @@
+package com.manir.springbootecommercerestapi.dto;
+
+import lombok.Data;
+
+@Data
+public class LoginDto {
+    private String userNameOrEmail;
+    private String password;
+}

src/main/java/com/manir/springbootecommercerestapi/dto/SignUpDto.java

@@ -0,0 +1,11 @@
+package com.manir.springbootecommercerestapi.dto;
+
+import lombok.Data;
+
+@Data
+public class SignUpDto {
+    private String name;
+    private String username;
+    private String email;
+    private String password;
+}

src/main/java/com/manir/springbootecommercerestapi/service/Impl/UserRegisterServiceImpl.java

@@ -0,0 +1,57 @@
+package com.manir.springbootecommercerestapi.service.Impl;
+
+import com.manir.springbootecommercerestapi.dto.SignUpDto;
+import com.manir.springbootecommercerestapi.model.Role;
+import com.manir.springbootecommercerestapi.model.User;
+import com.manir.springbootecommercerestapi.repository.RoleRepository;
+import com.manir.springbootecommercerestapi.repository.UserRepository;
+import com.manir.springbootecommercerestapi.service.UserRegisterService;
+import org.modelmapper.ModelMapper;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.stereotype.Service;
+
+import java.util.Collections;
+
+@Service
+public class UserRegisterServiceImpl implements UserRegisterService {
+
+    @Autowired
+    private UserRepository userRepository;
+    @Autowired
+    private RoleRepository roleRepository;
+    @Autowired
+    private PasswordEncoder passwordEncoder;
+    @Autowired
+    private ModelMapper modelMapper;
+
+    @Override
+    public SignUpDto registerUser(SignUpDto signUpDto) {
+
+        //convert dto to entity
+        User user = mapToEntity(signUpDto);
+        //save user to db
+        User registeredUser = userRepository.save(user);
+        return  mapToDto(registeredUser);
+    }
+
+    //map to dto
+    private SignUpDto mapToDto(User user){
+        SignUpDto signUpDto = modelMapper.map(user, SignUpDto.class);
+        return signUpDto;
+    }
+
+    //map to entity
+    private User mapToEntity(SignUpDto signUpDto){
+        User user = new User();
+        user.setName(signUpDto.getName());
+        user.setUserName(signUpDto.getUsername());
+        user.setEmail(signUpDto.getEmail());
+        user.setPassword(passwordEncoder.encode(signUpDto.getPassword()));
+
+        //add role to the user
+        Role role = roleRepository.findByName("ROLE_USER").get();
+        user.setRoles(Collections.singleton(role));
+        return user;
+    }
+}

src/main/java/com/manir/springbootecommercerestapi/service/UserRegisterService.java

@@ -0,0 +1,7 @@
+package com.manir.springbootecommercerestapi.service;
+
+import com.manir.springbootecommercerestapi.dto.SignUpDto;
+
+public interface UserRegisterService {
+    SignUpDto registerUser(SignUpDto signUpDto);
+}