Changes

10 changed files (+331/-21)

• .editorconfig
  • @@ -22,3 +22,8 @@ # <https://protobuf.dev/programming-guides/style/>
    [*.proto] indent_style = space indent_size = 2 + + # YAML has fundamentally flawed design of forcing two spaces indentation. + [*.{yaml,yml}] + indent_style = space + indent_size = 2
• .gitignore (new)
  • @@ -0,0 +1,14 @@
    + # Copyright 2025 Shota FUJI + # + # This source code is licensed under Zero-Clause BSD License. + # You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt + # You may also obtain a copy of the Zero-Clause BSD License at + # <https://opensource.org/license/0bsd> + # + # SPDX-License-Identifier: 0BSD + + # Output directory for code generated by protoc. + /gen + + # Built binary + /event_sourcing_user_management_poc
• buf.gen.yaml (new)
  • @@ -0,0 +1,20 @@
    + # Copyright 2025 Shota FUJI + # + # This source code is licensed under Zero-Clause BSD License. + # You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt + # You may also obtain a copy of the Zero-Clause BSD License at + # <https://opensource.org/license/0bsd> + # + # SPDX-License-Identifier: 0BSD + # + # === + # + # This file configures what will happen you run "buf generate". + + version: v2 + + plugins: + - local: protoc-gen-go + out: gen + opt: + - module=pocka.jp/x/event_sourcing_user_management_poc/gen
• go.mod (new)
  • @@ -0,0 +1,39 @@
    + // Copyright 2025 Shota FUJI + // + // This source code is licensed under Zero-Clause BSD License. + // You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt + // You may also obtain a copy of the Zero-Clause BSD License at + // <https://opensource.org/license/0bsd> + // + // SPDX-License-Identifier: 0BSD + + module pocka.jp/x/event_sourcing_user_management_poc + + go 1.24.1 + + require ( + github.com/charmbracelet/log v0.4.1 + golang.org/x/crypto v0.36.0 + google.golang.org/protobuf v1.36.6 + modernc.org/sqlite v1.36.3 + ) + + require ( + github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect + github.com/charmbracelet/lipgloss v1.0.0 // indirect + github.com/charmbracelet/x/ansi v0.4.2 // indirect + github.com/dustin/go-humanize v1.0.1 // indirect + github.com/go-logfmt/logfmt v0.6.0 // indirect + github.com/google/uuid v1.6.0 // indirect + github.com/lucasb-eyer/go-colorful v1.2.0 // indirect + github.com/mattn/go-isatty v0.0.20 // indirect + github.com/muesli/termenv v0.16.0 // indirect + github.com/ncruces/go-strftime v0.1.9 // indirect + github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect + github.com/rivo/uniseg v0.4.7 // indirect + golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect + golang.org/x/sys v0.31.0 // indirect + modernc.org/libc v1.61.13 // indirect + modernc.org/mathutil v1.7.1 // indirect + modernc.org/memory v1.8.2 // indirect + )
• go.sum (new)
  • @@ -0,0 +1,77 @@
    + github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k= + github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8= + github.com/charmbracelet/lipgloss v1.0.0 h1:O7VkGDvqEdGi93X+DeqsQ7PKHDgtQfF8j8/O2qFMQNg= + github.com/charmbracelet/lipgloss v1.0.0/go.mod h1:U5fy9Z+C38obMs+T+tJqst9VGzlOYGj4ri9reL3qUlo= + github.com/charmbracelet/log v0.4.1 h1:6AYnoHKADkghm/vt4neaNEXkxcXLSV2g1rdyFDOpTyk= + github.com/charmbracelet/log v0.4.1/go.mod h1:pXgyTsqsVu4N9hGdHmQ0xEA4RsXof402LX9ZgiITn2I= + github.com/charmbracelet/x/ansi v0.4.2 h1:0JM6Aj/g/KC154/gOP4vfxun0ff6itogDYk41kof+qk= + github.com/charmbracelet/x/ansi v0.4.2/go.mod h1:dk73KoMTT5AX5BsX0KrqhsTqAnhZZoCBjs7dGWp4Ktw= + github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= + github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= + github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= + github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= + github.com/go-logfmt/logfmt v0.6.0 h1:wGYYu3uicYdqXVgoYbvnkrPVXkuLM1p1ifugDMEdRi4= + github.com/go-logfmt/logfmt v0.6.0/go.mod h1:WYhtIu8zTZfxdn5+rREduYbwxfcBr/Vr6KEVveWlfTs= + github.com/google/go-cmp v0.5.8 h1:e6P7q2lk1O+qJJb4BtCQXlK8vWEO8V1ZeuEdJNOqZyg= + github.com/google/go-cmp v0.5.8/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= + github.com/google/pprof v0.0.0-20250317173921-a4b03ec1a45e h1:ijClszYn+mADRFY17kjQEVQ1XRhq2/JR1M3sGqeJoxs= + github.com/google/pprof v0.0.0-20250317173921-a4b03ec1a45e/go.mod h1:boTsfXsheKC2y+lKOCMpSfarhxDeIzfZG1jqGcPl3cA= + github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= + github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= + github.com/lucasb-eyer/go-colorful v1.2.0 h1:1nnpGOrhyZZuNyfu1QjKiUICQ74+3FNCN69Aj6K7nkY= + github.com/lucasb-eyer/go-colorful v1.2.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0= + github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY= + github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= + github.com/muesli/termenv v0.16.0 h1:S5AlUN9dENB57rsbnkPyfdGuWIlkmzJjbFf0Tf5FWUc= + github.com/muesli/termenv v0.16.0/go.mod h1:ZRfOIKPFDYQoDFF4Olj7/QJbW60Ol/kL1pU3VfY/Cnk= + github.com/ncruces/go-strftime v0.1.9 h1:bY0MQC28UADQmHmaF5dgpLmImcShSi2kHU9XLdhx/f4= + github.com/ncruces/go-strftime v0.1.9/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls= + github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= + github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= + github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE= + github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= + github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= + github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= + github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA= + github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= + golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34= + golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc= + golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI= + golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo= + golang.org/x/mod v0.19.0 h1:fEdghXQSo20giMthA7cd28ZC+jts4amQ3YMXiP5oMQ8= + golang.org/x/mod v0.19.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= + golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M= + golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= + golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= + golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik= + golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k= + golang.org/x/tools v0.23.0 h1:SGsXPZ+2l4JsgaCKkx+FQ9YZ5XEtA1GZYuoDjenLjvg= + golang.org/x/tools v0.23.0/go.mod h1:pnu6ufv6vQkll6szChhK3C3L/ruaIv5eBeztNG8wtsI= + google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY= + google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= + gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= + gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= + modernc.org/cc/v4 v4.24.4 h1:TFkx1s6dCkQpd6dKurBNmpo+G8Zl4Sq/ztJ+2+DEsh0= + modernc.org/cc/v4 v4.24.4/go.mod h1:uVtb5OGqUKpoLWhqwNQo/8LwvoiEBLvZXIQ/SmO6mL0= + modernc.org/ccgo/v4 v4.23.16 h1:Z2N+kk38b7SfySC1ZkpGLN2vthNJP1+ZzGZIlH7uBxo= + modernc.org/ccgo/v4 v4.23.16/go.mod h1:nNma8goMTY7aQZQNTyN9AIoJfxav4nvTnvKThAeMDdo= + modernc.org/fileutil v1.3.0 h1:gQ5SIzK3H9kdfai/5x41oQiKValumqNTDXMvKo62HvE= + modernc.org/fileutil v1.3.0/go.mod h1:XatxS8fZi3pS8/hKG2GH/ArUogfxjpEKs3Ku3aK4JyQ= + modernc.org/gc/v2 v2.6.3 h1:aJVhcqAte49LF+mGveZ5KPlsp4tdGdAOT4sipJXADjw= + modernc.org/gc/v2 v2.6.3/go.mod h1:YgIahr1ypgfe7chRuJi2gD7DBQiKSLMPgBQe9oIiito= + modernc.org/libc v1.61.13 h1:3LRd6ZO1ezsFiX1y+bHd1ipyEHIJKvuprv0sLTBwLW8= + modernc.org/libc v1.61.13/go.mod h1:8F/uJWL/3nNil0Lgt1Dpz+GgkApWh04N3el3hxJcA6E= + modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU= + modernc.org/mathutil v1.7.1/go.mod h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg= + modernc.org/memory v1.8.2 h1:cL9L4bcoAObu4NkxOlKWBWtNHIsnnACGF/TbqQ6sbcI= + modernc.org/memory v1.8.2/go.mod h1:ZbjSvMO5NQ1A2i3bWeDiVMxIorXwdClKE/0SZ+BMotU= + modernc.org/opt v0.1.4 h1:2kNGMRiUjrp4LcaPuLY2PzUfqM/w9N23quVwhKt5Qm8= + modernc.org/opt v0.1.4/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns= + modernc.org/sortutil v1.2.1 h1:+xyoGf15mM3NMlPDnFqrteY07klSFxLElE2PVuWIJ7w= + modernc.org/sortutil v1.2.1/go.mod h1:7ZI3a3REbai7gzCLcotuw9AC4VZVpYMjDzETGsSMqJE= + modernc.org/sqlite v1.36.3 h1:qYMYlFR+rtLDUzuXoST1SDIdEPbX8xzuhdF90WsX1ss= + modernc.org/sqlite v1.36.3/go.mod h1:ADySlx7K4FdY5MaJcEv86hTJ0PjedAloTUuif0YS3ws= + modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0= + modernc.org/strutil v1.2.1/go.mod h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A= + modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y= + modernc.org/token v1.1.0/go.mod h1:UGzOrNV1mAFSEB63lOFHIpNRUVMvYTc6yu1SMY/XTDM=
• init.sql (new)
  • @@ -0,0 +1,13 @@
    + -- Copyright 2025 Shota FUJI + -- + -- This source code is licensed under Zero-Clause BSD License. + -- You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt + -- You may also obtain a copy of the Zero-Clause BSD License at + -- <https://opensource.org/license/0bsd> + -- + -- SPDX-License-Identifier: 0BSD + + CREATE TABLE user_events ( + seq INTEGER PRIMARY KEY ON CONFLICT ROLLBACK AUTOINCREMENT, + payload BLOB + );
• proto/event/initial_admin_creation_password_created.proto
  • @@ -11,9 +11,9 @@ edition = "2023";
    package event; - option go_package = "pocka.jp/x/event_sourcing_user_management_poc/proto"; + option go_package = "pocka.jp/x/event_sourcing_user_management_poc/gen/event"; message InitialAdminCreationPasswordCreated { - string password_hash = 1; - string salt = 2; + bytes password_hash = 1; + bytes salt = 2; }
• server.go (new)
  • @@ -0,0 +1,102 @@
    + // Copyright 2025 Shota FUJI + // + // This source code is licensed under Zero-Clause BSD License. + // You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt + // You may also obtain a copy of the Zero-Clause BSD License at + // <https://opensource.org/license/0bsd> + // + // SPDX-License-Identifier: 0BSD + + package main + + import ( + "database/sql" + _ "embed" + "flag" + "os" + "strings" + + "github.com/charmbracelet/lipgloss" + "github.com/charmbracelet/log" + _ "modernc.org/sqlite" + + "pocka.jp/x/event_sourcing_user_management_poc/setups" + ) + + //go:embed init.sql + var initSQL string + + var verbose = flag.Bool("verbose", false, "Output debug logs") + + var shouldCreateInitAdminCreationPassword = flag.Bool( + "init-admin-creation-password", false, "Whether generate a password for initial admin user creation", + ) + + // charmbracelet/log uses 256-color for default styles. + // In other words, they ignore common terminal emulator's palette and uses + // semi-hard-coded color. Unsafe defaults. + func createLogger() *log.Logger { + styles := log.DefaultStyles() + styles.Levels = map[log.Level]lipgloss.Style{ + log.DebugLevel: lipgloss.NewStyle(). + SetString(strings.ToUpper(log.DebugLevel.String())). + Bold(true). + Width(5). + Foreground(lipgloss.Color("7")), + log.InfoLevel: lipgloss.NewStyle(). + SetString(strings.ToUpper(log.InfoLevel.String())). + Bold(true). + Width(5). + Foreground(lipgloss.Color("4")), + log.WarnLevel: lipgloss.NewStyle(). + SetString(strings.ToUpper(log.WarnLevel.String())). + Bold(true). + Width(5). + Foreground(lipgloss.Color("3")), + log.ErrorLevel: lipgloss.NewStyle(). + SetString(strings.ToUpper(log.ErrorLevel.String())). + Bold(true). + Width(5). + Foreground(lipgloss.Color("1")), + log.FatalLevel: lipgloss.NewStyle(). + SetString(strings.ToUpper(log.FatalLevel.String())). + Bold(true). + Width(5). + Foreground(lipgloss.Color("1")), + } + + log.SetStyles(styles) + logger := log.New(os.Stderr) + logger.SetStyles(styles) + + return logger + } + + func main() { + logger := createLogger() + + flag.Parse() + if *verbose { + logger.SetLevel(log.DebugLevel) + } + + db, err := sql.Open("sqlite", ":memory:") + if err != nil { + logger.Fatalf("Opening in-memory database failed: %s\n", err) + } + + if _, err := db.Exec(initSQL); err != nil { + logger.Fatalf("Initialization SQL failed: %s\n", err) + } + + if *shouldCreateInitAdminCreationPassword { + logger.Debug("Inserting InitialAdminCreationPasswordCreated event...") + + password, err := setups.InitAdminCreationPassword(db) + if err != nil { + logger.Fatal(err) + } + + logger.Infof("Use this password to create initial user: %s", password) + } + }
• setups/init_admin_creation_password.go (new)
  • @@ -0,0 +1,58 @@
    + // Copyright 2025 Shota FUJI + // + // This source code is licensed under Zero-Clause BSD License. + // You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt + // You may also obtain a copy of the Zero-Clause BSD License at + // <https://opensource.org/license/0bsd> + // + // SPDX-License-Identifier: 0BSD + + package setups + + import ( + "crypto/rand" + "database/sql" + "fmt" + + "golang.org/x/crypto/argon2" + "google.golang.org/protobuf/proto" + + "pocka.jp/x/event_sourcing_user_management_poc/gen/event" + ) + + // InitAdminCreationPassword inserts InitialAdminCreationPasswordCreated event then + // returns the generated password. As the database resets every server starts, this + // function does not check whether there are events in the stream. This would be + // inefficient in real-world use cases. + func InitAdminCreationPassword(db *sql.DB) (string, error) { + password := rand.Text() + + salt := make([]byte, 32) + // rand.Read never returns an error. + // https://pkg.go.dev/crypto/rand@go1.24.1#Read + rand.Read(salt) + + // Parameters recommended in RFC (according to Go docs) + passwordHash := argon2.IDKey([]byte(password), salt, 1, 64*1024, 4, 32) + + ev := &event.InitialAdminCreationPasswordCreated{ + PasswordHash: passwordHash, + Salt: salt, + } + + data, err := proto.Marshal(ev) + if err != nil { + return "", fmt.Errorf("Failed to encode InitialAdminCreationPasswordCreated message: %s", err) + } + + stmt, err := db.Prepare("INSERT OR ABORT INTO user_events (payload) VALUES (?)") + if err != nil { + return "", fmt.Errorf("Failed to prepare INSERT query: %s", err) + } + + if _, err := stmt.Exec(data); err != nil { + return "", fmt.Errorf("Failed to INSERT InitialAdminCreationPasswordCreated: %s", err) + } + + return password, nil + }
• src/main.go (deleted)
  • @@ -1,18 +0,0 @@
    - // Copyright 2025 Shota FUJI - // - // This source code is licensed under Zero-Clause BSD License. - // You can find a copy of the Zero-Clause BSD License at LICENSES/0BSD.txt - // You may also obtain a copy of the Zero-Clause BSD License at - // <https://opensource.org/license/0bsd> - // - // SPDX-License-Identifier: 0BSD - - package main - - import ( - "fmt" - ) - - func main() { - fmt.Println("Hello, World!") - }