fix: return apt Gone status code and error message when OTP no longer exists in the store.

Author: drishyars

cmd/otpgateway/handlers.go

@@ -318,7 +318,7 @@ func handleVerifyOTP(w http.ResponseWriter, r *http.Request) {
 	if err != nil {
 		code := http.StatusBadRequest
 		if err == store.ErrNotExist {
-			sendErrorResponse(w, err.Error(), code, nil)
+			sendErrorResponse(w, err.Error(), http.StatusGone, nil)
 			return
 		}
 

cmd/otpgateway/handlers_test.go

@@ -234,15 +234,15 @@ func TestCheckOTP(t *testing.T) {
 
 	// Check it again. Should be deleted.
 	r = testRequest(t, http.MethodPost, "/api/otp/"+dummyOTPID, cp, &data)
-	assert.NotEqual(t, http.StatusOK, r.StatusCode, "OTP didn't get deleted on verification")
+	assert.Equal(t, http.StatusGone, r.StatusCode, "OTP didn't get deleted on verification")
 
-	// Check non-existent OTP, should not return 200.
+	// Check non-existent OTP, should return 410 Gone.
 	r = testRequest(t, http.MethodPost, "/api/otp/abc123", cp, &data)
-	assert.NotEqual(t, http.StatusOK, r.StatusCode, "non-existent OTP didn't return 400")
+	assert.Equal(t, http.StatusGone, r.StatusCode, "non-existent OTP didn't return 410")
 
 	// Check non-existent OTP, should return store.ErrNotExist error message.
 	_ = testRequest(t, http.MethodPost, "/api/otp/abc123", cp, &out)
-	assert.Equal(t, "the OTP does not exist", out.Message, "non-existent OTP passed")
+	assert.Equal(t, "OTP has expired or doesn't exist", out.Message, "non-existent OTP passed")
 }
 
 func TestCheckOTPAttempts(t *testing.T) {

internal/store/store.go

@@ -8,7 +8,7 @@ import (
 
 // ErrNotExist is thrown when an OTP (requested by namespace / ID)
 // does not exist.
-var ErrNotExist = errors.New("the OTP does not exist")
+var ErrNotExist = errors.New("OTP has expired or doesn't exist")
 
 const (
 	CounterAttempts = "attempts"