Merge pull request #59 from Zenfulcode/patch-password-validation

Patch password validation

Author: gustaavik

src/main/java/com/zenfulcode/commercify/commercify/config/SecurityConfig.java

@@ -36,7 +36,6 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                                 "/api/v1/auth/**",
                                 "/api/v1/products/active",
                                 "/api/v1/products/{id}").permitAll()
-                        .requestMatchers("/admin/**").hasRole("ADMIN")
                         .anyRequest().authenticated()
                 )
                 .sessionManagement(smc -> smc.sessionCreationPolicy(SessionCreationPolicy.STATELESS))

src/main/java/com/zenfulcode/commercify/commercify/service/AuthenticationService.java

@@ -88,9 +88,12 @@ public UserDTO authenticate(LoginUserRequest login) {
                 )
         );
 
-        return userRepository.findByEmail(login.email())
-                .map(mapper)
-                .orElseThrow();
+        UserEntity user = userRepository.findByEmail(login.email()).orElseThrow();
+
+        if (passwordEncoder.matches(login.password(), user.getPassword()))
+            return null;
+
+        return mapper.apply(user);
     }
 
     @Transactional(readOnly = true)