feat: Initial working api routes.

Sources/App/Models/User.swift

@@ -0,0 +1,92 @@
+import Fluent
+import Vapor
+
+final class User: Model, @unchecked Sendable {
+  static let schema = "user"
+
+  @ID(key: .id)
+  var id: UUID?
+
+  @Field(key: "username")
+  var username: String
+
+  @Field(key: "email")
+  var email: String
+
+  @Field(key: "password_hash")
+  var passwordHash: String
+
+  init() {}
+
+  init(id: UUID? = nil, username: String, email: String, passwordHash: String) {
+    self.id = id
+    self.username = username
+    self.email = email
+    self.passwordHash = passwordHash
+  }
+
+  func toDTO() -> DTO {
+    .init(id: id, username: $username.value, email: $email.value)
+  }
+
+  func generateToken() throws -> UserToken {
+    try .init(
+      value: [UInt8].random(count: 16).base64,
+      userID: requireID()
+    )
+  }
+
+}
+
+extension User {
+
+  struct Create: Content {
+    var username: String
+    var email: String
+    var password: String
+    var confirmPassword: String
+  }
+
+  struct DTO: Content {
+    let id: UUID?
+    let username: String?
+    let email: String?
+  }
+
+  struct Migrate: AsyncMigration {
+    let name = "CreateUser"
+
+    func prepare(on database: any Database) async throws {
+      try await database.schema(User.schema)
+        .id()
+        .field("username", .string, .required)
+        .field("email", .string, .required)
+        .field("password_hash", .string, .required)
+        .unique(on: "email", "username")
+        .create()
+    }
+
+    func revert(on database: any Database) async throws {
+      try await database.schema(User.schema).delete()
+    }
+  }
+}
+
+extension User: ModelAuthenticatable {
+  static let usernameKey = \User.$email
+  static let passwordHashKey = \User.$passwordHash
+
+  func verify(password: String) throws -> Bool {
+    try Bcrypt.verify(password, created: passwordHash)
+  }
+}
+
+extension User: ModelSessionAuthenticatable {}
+
+extension User.Create: Validatable {
+  static func validations(_ validations: inout Validations) {
+    validations.add("username", as: String.self, is: !.empty)
+    validations.add("email", as: String.self, is: .email)
+    validations.add("password", as: String.self, is: .count(8...))
+  }
+}