1 files changed, 40 insertions, 0 deletions
diff --git a/src/operations/sign_in_user.cr b/src/operations/sign_in_user.cr
new file mode 100644
index 0000000..de80342
--- /dev/null
+++ b/src/operations/sign_in_user.cr
@@ -0,0 +1,40 @@
+class SignInUser < Avram::Operation
+  param_key :user
+  # You can modify this in src/operations/mixins/user_from_email.cr
+  include UserFromEmail
+
+  attribute email : String
+  attribute password : String
+
+  # Run validations and yields the operation and the user if valid
+  def run
+    user = user_from_email
+    validate_credentials(user)
+
+    if valid?
+      user
+    else
+      nil
+    end
+  end
+
+  # `validate_credentials` determines if a user can sign in.
+  #
+  # If desired, you can add additional checks in this method, e.g.
+  #
+  #    if user.locked?
+  #      email.add_error "is locked out"
+  #    end
+  private def validate_credentials(user)
+    if user
+      unless Authentic.correct_password?(user, password.value.to_s)
+        password.add_error "is wrong"
+      end
+    else
+      # Usually ok to say that an email is not in the system:
+      # https://kev.inburke.com/kevin/invalid-username-or-password-useless/
+      # https://github.com/luckyframework/lucky_cli/issues/192
+      email.add_error "is not in our system"
+    end
+  end
+end