[mobile] require password for one-time code generation

Author: capcom6

internal/sms-gateway/handlers/mobile.go

@@ -201,7 +201,7 @@ func (h *mobileHandler) patchMessage(device models.Device, c *fiber.Ctx) error {
 
 //	@Summary		Get one-time code for device registration
 //	@Description	Returns one-time code for device registration
-//	@Security		MobileToken
+//	@Security		ApiAuth
 //	@Tags			Device
 //	@Accept			json
 //	@Produce		json
@@ -210,8 +210,8 @@ func (h *mobileHandler) patchMessage(device models.Device, c *fiber.Ctx) error {
 //	@Router			/mobile/v1/user/code [get]
 //
 // Get user code
-func (h *mobileHandler) getUserCode(device models.Device, c *fiber.Ctx) error {
-	code, err := h.authSvc.GenerateUserCode(device.UserID)
+func (h *mobileHandler) getUserCode(user models.User, c *fiber.Ctx) error {
+	code, err := h.authSvc.GenerateUserCode(user.ID)
 	if err != nil {
 		return err
 	}
@@ -272,6 +272,12 @@ func (h *mobileHandler) Register(router fiber.Router) {
 		h.postDevice,
 	)
 
+	router.Get("/user/code",
+		userauth.NewBasic(h.authSvc),
+		userauth.UserRequired(),
+		userauth.WithUser(h.getUserCode),
+	)
+
 	router.Use(
 		deviceauth.New(h.authSvc),
 	)
@@ -285,7 +291,6 @@ func (h *mobileHandler) Register(router fiber.Router) {
 	router.Get("/message", deviceauth.WithDevice(h.getMessage))
 	router.Patch("/message", deviceauth.WithDevice(h.patchMessage))
 
-	router.Get("/user/code", deviceauth.WithDevice(h.getUserCode))
 	router.Patch("/user/password", deviceauth.WithDevice(h.changePassword))
 
 	h.webhooksCtrl.Register(router.Group("/webhooks"))

pkg/swagger/docs/swagger.json

@@ -771,7 +771,7 @@
             "get": {
                 "security": [
                     {
-                        "MobileToken": []
+                        "ApiAuth": []
                     }
                 ],
                 "description": "Returns one-time code for device registration",

pkg/swagger/docs/swagger.yaml

@@ -935,7 +935,7 @@ paths:
           schema:
             $ref: '#/definitions/smsgateway.ErrorResponse'
       security:
-      - MobileToken: []
+      - ApiAuth: []
       summary: Get one-time code for device registration
       tags:
       - Device