feat: add Logs

application/Auth/Commands/Login.cs

@@ -2,12 +2,13 @@ using AutoMapper;
 using MediatR;
 using mws.backend.dotnet.application.Common;
 using mws.backend.dotnet.application.Users;
+using mws.backend.dotnet.domain.Audit;
 
 namespace mws.backend.dotnet.application.Auth;
 
 public record LoginCommand(LoginRequest Request) : IRequest<LoginResponse>;
 
-public class LoginHandler(IUnitOfWork uow, IPasswordHasher passwordHasher, ITokenService tokenService, IMapper mapper)
+public class LoginHandler(IUnitOfWork uow, IPasswordHasher passwordHasher, ITokenService tokenService, IMapper mapper, ICurrentUser currentUser)
     : IRequestHandler<LoginCommand, LoginResponse>
 {
     public async Task<LoginResponse> Handle(LoginCommand command, CancellationToken ct)
@@ -15,20 +16,46 @@ public class LoginHandler(IUnitOfWork uow, IPasswordHasher passwordHasher, IToke
         var username = command.Request.Username.Trim();
         var user = await uow.Users.GetByUsernameWithRoleAsync(username, ct);
 
-        if (user is null || !passwordHasher.Verify(command.Request.Password, user.PasswordHash))
+        if (user is null)
         {
+            await WriteLoginLogAsync(username, null, false, "Unknown username", ct);
+            throw new UnauthorizedException("Invalid username or password");
+        }
+
+        if (!passwordHasher.Verify(command.Request.Password, user.PasswordHash))
+        {
+            await WriteLoginLogAsync(username, user.Id, false, "Invalid password", ct);
             throw new UnauthorizedException("Invalid username or password");
         }
 
         if (!user.IsActive)
         {
+            await WriteLoginLogAsync(username, user.Id, false, "Account disabled", ct);
             throw new ForbiddenException("Account disabled");
         }
 
+        await WriteLoginLogAsync(username, user.Id, true, null, ct);
+
         return new LoginResponse
         {
             Token = tokenService.CreateToken(user.Id, user.Username),
             User = mapper.Map<UserDto>(user),
         };
     }
+
+    private async Task WriteLoginLogAsync(string username, Guid? userId, bool success, string? failureReason, CancellationToken ct)
+    {
+        uow.LoginLogs.Add(new LoginLog
+        {
+            Id = Guid.NewGuid(),
+            Username = username.Length <= 100 ? username : username[..100],
+            UserId = userId,
+            Success = success,
+            FailureReason = failureReason,
+            IpAddress = currentUser.IpAddress,
+            UserAgent = currentUser.UserAgent,
+            CreatedAt = DateTimeOffset.UtcNow,
+        });
+        await uow.SaveChangesAsync(ct);
+    }
 }