feat(auth): allow login with email or username

src/main/java/br/com/notehub/application/controller/auth/AuthController.java

@@ -34,10 +34,10 @@ public class AuthController {
     private final UserService userService;
     private final MailProducer producer;
 
-    @Operation(summary = "Login user", description = "Authenticates a user with username and password.")
+    @Operation(summary = "Authenticate User", description = "Authenticates a user using an account identifier and password.")
     @ApiResponses(value = {
             @ApiResponse(responseCode = "200", description = "User authenticated successfully."),
-            @ApiResponse(responseCode = "401", description = "Invalid password.", content = @Content(mediaType = "application/json")),
+            @ApiResponse(responseCode = "401", description = "Invalid identifier or password.", content = @Content(mediaType = "application/json")),
             @ApiResponse(responseCode = "400", description = "Missing or invalid X-Device-Id.", content = @Content(mediaType = "application/json")),
             @ApiResponse(responseCode = "403", description = "Email not confirmed.", content = @Content(mediaType = "application/json")),
             @ApiResponse(responseCode = "404", description = "User not found.", content = @Content(examples = {})),
@@ -49,7 +49,7 @@ public ResponseEntity<AuthRES> loginUser(
             HttpServletRequest request,
             @Valid @RequestBody AuthREQ dto
     ) {
-        AuthRES token = service.auth(request, dto.username(), dto.password());
+        AuthRES token = service.auth(request, dto.identifier(), dto.password());
         return ResponseEntity.status(HttpStatus.OK).body(token);
     }
 

src/main/java/br/com/notehub/application/dto/request/token/AuthREQ.java

@@ -2,18 +2,13 @@
 
 import br.com.notehub.application.validation.constraints.NoForbiddenWords;
 import jakarta.validation.constraints.NotBlank;
-import jakarta.validation.constraints.Pattern;
 import jakarta.validation.constraints.Size;
 
 public record AuthREQ(
         @NoForbiddenWords(message = "Não pode")
         @NotBlank
-        @Pattern(
-                regexp = "^(?!.*[\\p{Zs}\\u00A0\\u2007\\u202F]).*$",
-                message = "Não use espaços"
-        )
-        @Size(min = 2, max = 12, message = "Tamanho inválido")
-        String username,
+        @Size(min = 2, max = 255, message = "Tamanho inválido")
+        String identifier,
 
         @NotBlank
         @Size(min = 4, max = 255, message = "Tamanho inválido")

src/main/java/br/com/notehub/application/implementation/token/TokenServiceImpl.java

@@ -189,9 +189,12 @@ public String validateToken(String accessToken) {
 
     @Transactional
     @Override
-    public AuthRES auth(HttpServletRequest request, String username, String password) throws BadCredentialsException {
+    public AuthRES auth(HttpServletRequest request, String identifier, String password) throws BadCredentialsException {
 
-        User user = userRepository.findByUsername(username.toLowerCase()).orElseThrow(() -> new BadCredentialsException("username"));
+        User user = (identifier.contains("@")
+                ? userRepository.findByEmail(identifier)
+                : userRepository.findByUsername(identifier))
+                .orElseThrow(() -> new BadCredentialsException("identifier"));
         if (!user.isActive()) throw new DisabledException("Email não confirmado");
 
         boolean matches = encoder.matches(password, user.getPassword());

src/main/java/br/com/notehub/domain/token/TokenService.java

@@ -26,7 +26,7 @@ public interface TokenService {
 
     String validateToken(String accessToken);
 
-    AuthRES auth(HttpServletRequest request, String username, String password) throws BadCredentialsException;
+    AuthRES auth(HttpServletRequest request, String identifier, String password) throws BadCredentialsException;
 
     AuthRES authWithGoogleAcc(HttpServletRequest request, String token);
 

src/main/java/br/com/notehub/infra/exception/ControllerAdvice.java

@@ -144,8 +144,8 @@ private ResponseEntity<HttpStatus> handleEntityExistsException(EntityExistsExcep
     private ResponseEntity<List<CustomResponse>> handleBadCredentialsException(BadCredentialsException ex) {
         List<FieldError> errors = new ArrayList<>();
         return switch (ex.getMessage()) {
-            case "username" -> {
-                errors.add(new FieldError("user", "username", "Nome não existe."));
+            case "identifier" -> {
+                errors.add(new FieldError("user", "identifier", "Identificador não existe."));
                 yield ResponseEntity.status(HttpStatus.NOT_FOUND).body(errors.stream().map(CustomResponse::new).toList());
             }
             case "password" -> {