Get DecodingError before send to server

[saroar]

DuplicateAction.zip

Back-end server test dont have any issue at all

debuting SPM swift-url-routing very difficult becz cant get where error coming from

public func deviceCheckHandler(
    request: Request,
    route: DeviceCheckRoute
) async throws -> AsyncResponseEncodable {
    switch route {
    case .updateTwoBits:
        return Response(status: .badRequest)
    case .queryTwoBits:
        return Response(status: .badRequest)
    case .validatreDeviceToken(let data):
        let environmentNameUppercased = request.application.environment.name.uppercased()

        guard
            let deviceCheckUrlString = Environment.get("DEVICE_CHECK_URL_\(environmentNameUppercased)"),
            let TEAM_ID = Environment.get("TEAM_ID")
        else {
            request.application.logger.notice("Missing KEY_ID, TEAM_ID, DEVICE_CHECK_URL_\(environmentNameUppercased)")
            fatalError("\(#line) \(#file) Missing DEVICE_CHECK_URL_\(environmentNameUppercased)")
        }
        let deviceCheckUrl = URI(string: deviceCheckUrlString + "/v1/validate_device_token")

        // Signs and verifies JWTs
        let jwt = JWTDeviceCheck(keyID: Environment.DeviceCheck.keyId, teamID: TEAM_ID, issueDate: Date(), expireDuration: 60 * 60)
        // Sign the payload, returning a JWT.
        let token = try jwt.sign(with: Environment.DeviceCheck.ecdsaPrivateKey)

        let device_token = data.base64EncodedString()

        let deviceCheckRequest = DeviceCheckRequest.init(
            device_token: device_token,
            transaction_id: UUID().uuidString,
            timestamp: Date().millisecondsSince1970
        )

        let response = try await request.client.post(deviceCheckUrl, headers: [
            "Content-Type": "application/json",
            "Authorization": "Bearer \(token)"
        ], beforeSend: { outGoingReq in
            try outGoingReq.content.encode(deviceCheckRequest)
        })

        return response.status
    }
}

public func authenticationHandler(
    request: Request,
    route: AuthenticationRoute
) async throws -> AsyncResponseEncodable {
    switch route {
    case .login(input: let input):

        do {
            let res = try await deviceCheckHandler(request: request, route: .validatreDeviceToken(input.deviceCheckdata))
            if try await res.encodeResponse(for: request).status != .ok {
                let msg = "deviceCheckHandler failded for validatreDeviceToken authenticationHandler"
                request.application.logger.notice("\(msg)")
                return Response(status: .badRequest, body: .init(string: msg))
            } else {
                print(#line, try await res.encodeResponse(for: request).status)
            }

        } catch {
            print(#line, "\(error.localizedDescription)")
        }

        let verification = input

        let phoneNumber = verification.phoneNumber.removingInvalidCharacters
        let code = String.randomDigits(ofLength: 6)
        let message = "Hello there! Your verification code is \(code)"

        guard let SENDER_NUMBER = Environment.get("SENDER_NUMBER") else {
            fatalError("No value was found at the given public key environment 'SENDER_NUMBER'")
        }
        let sms = OutgoingSMS(body: message, from: SENDER_NUMBER, to: phoneNumber)

        request.logger.notice("SMS is \(message)")

        switch request.application.environment {
        case .production:
            _ = try await request.application.twilio.send(sms).get()

            let smsAttempt = SMSVerificationAttempt(
                code: code,
                expiresAt: Date().addingTimeInterval(5.0 * 60.0),
                phoneNumber: phoneNumber
            )

            _ = try await smsAttempt.save(on: request.db).get()
            let attemptId = try! smsAttempt.requireID()
            return SendUserVerificationResponse(
                phoneNumber: phoneNumber,
                attemptId: attemptId
            )

        case .development:

            let smsAttempt = SMSVerificationAttempt(
                code: "336699",
                expiresAt: Date().addingTimeInterval(5.0 * 60.0),
                phoneNumber: phoneNumber
            )
            _ = try await smsAttempt.save(on: request.db).get()

            let attemptId = try! smsAttempt.requireID()
            return SendUserVerificationResponse(phoneNumber: phoneNumber, attemptId: attemptId)

        default:
            let smsAttempt = SMSVerificationAttempt(
                code: "336699",
                expiresAt: Date().addingTimeInterval(5.0 * 60.0),
                phoneNumber: phoneNumber
            )
            _ = smsAttempt.save(on: request.db).map { smsAttempt }

            let attemptId = try! smsAttempt.requireID()
            return SendUserVerificationResponse(phoneNumber: phoneNumber, attemptId: attemptId)
        }
    case .verifySms(input: let payload):

        guard
            let code = payload.code,
            let attemptId = payload.attemptId,
            let attemptIdObj = ObjectId(attemptId)
        else {
            throw Abort(.notFound, reason: "input code or attemptId is nil!")
        }
        let phoneNumber = payload.phoneNumber.removingInvalidCharacters

        guard let attempt = try await SMSVerificationAttempt.query(on: request.db)
            .filter(\.$code == code)
            .filter(\.$phoneNumber == phoneNumber)
            .filter(\.$id == attemptIdObj)
            .first()
            .get()
        else {
            throw Abort(.notFound, reason: "SMSVerificationAttempt not found!")
        }

            guard let expirationDate = attempt.expiresAt else {
                return LoginResponseP.init(status: "invalid-code")
            }

            guard expirationDate > Date() else {
                return LoginResponseP.init(status: "invalid-code")
            }

        return try await verificationResponseForValidUser(with: phoneNumber, on: request)

    case .refreshToken(input: let data):

        let refreshTokenFromData = data.refreshToken
        let jwtPayload: JWTRefreshToken = try request.application
            .jwt.signers.verify(refreshTokenFromData, as: JWTRefreshToken.self)

        guard let userID = jwtPayload.id else {
            throw Abort(.notFound, reason: "User id missing from RefreshToken")
        }

        guard let user = try await UserModel.query(on: request.db)
            .filter(\.$id == userID)
            .first()
            .get()
        else {
            throw Abort(.notFound, reason: "User not found by id: \(userID) for refresh token")
        }

        let payload = try Payload(with: user)
        let refreshPayload = JWTRefreshToken(user: user)

        do {
            let refreshToken = try request.application.jwt.signers.sign(refreshPayload)
            let payloadString = try request.application.jwt.signers.sign(payload)
            return RefreshTokenResponse(accessToken: payloadString, refreshToken: refreshToken)
        } catch {
            throw Abort(.notFound, reason: "jwt signers error: \(error)")
        }
    }
}

private func verificationResponseForValidUser(
    with phoneNumber: String,
    on req: Request) async throws -> LoginResponseP {

        let createNewUser = UserModel()
        createNewUser.phoneNumber = phoneNumber
        createNewUser.fullName = "unknown"
        createNewUser.role = .basic
        createNewUser.language = .english
        createNewUser.isEmailVerified = false
        createNewUser.passwordHash = ""


        if try await req.users.find(phoneNumber: phoneNumber) == nil {
            _ = try await createNewUser.save(on: req.db).get()
        }

        guard let user = try await req.users.find(phoneNumber: phoneNumber) else {
            throw Abort(.notFound, reason: "User not found")
        }

        do {
            let userPayload = try Payload(with: user)
            let refreshPayload = JWTRefreshToken(user: user)

            let accessToken = try req.application.jwt.signers.sign(userPayload)
            let refreshToken = try req.application.jwt.signers.sign(refreshPayload)

            let access = RefreshTokenResponse(accessToken: accessToken, refreshToken: refreshToken)
            return LoginResponseP(status: "ok", user: user.mapGet(),  access: access)
        }
        catch {
            throw error
        }

}

private func findUserResponse(
    with phoneNumber: String,
    on req: Request) async throws -> UserModel? {

    try await UserModel.query(on: req.db)
        .filter(\.$phoneNumber == phoneNumber)
        .first()
        .get()
}

func check(request: Request, data: Data) async throws -> HTTPResponseStatus {
    let environmentNameUppercased = request.application.environment.name.uppercased()

    guard
        let deviceCheckUrlString = Environment.get("DEVICE_CHECK_URL_\(environmentNameUppercased)"),
        let TEAM_ID = Environment.get("TEAM_ID")
    else {
        request.application.logger.notice("Missing KEY_ID, TEAM_ID, DEVICE_CHECK_URL_\(environmentNameUppercased)")
        fatalError("\(#line) \(#file) Missing DEVICE_CHECK_URL_\(environmentNameUppercased)")
    }
    let deviceCheckUrl = URI(string: deviceCheckUrlString + "/v1/validate_device_token")

    // Signs and verifies JWTs
    let jwt = JWTDeviceCheck(keyID: Environment.DeviceCheck.keyId, teamID: TEAM_ID, issueDate: Date(), expireDuration: 60 * 60)
    // Sign the payload, returning a JWT.
    let token = try jwt.sign(with: Environment.DeviceCheck.ecdsaPrivateKey)

    let device_token = data.base64EncodedString()

    let deviceCheckRequest = DeviceCheckRequest.init(
        device_token: device_token,
        transaction_id: UUID().uuidString,
        timestamp: Date().millisecondsSince1970
    )

    let response = try await request.client.post(deviceCheckUrl, headers: [
        "Content-Type": "application/json",
        "Authorization": "Bearer \(token)"
    ], beforeSend: { outGoingReq in
        try outGoingReq.content.encode(deviceCheckRequest)
    })

    return response.status
}

[saroar]

@stephencelis @mbrandonw issue cant be in VaporRoute SPM
VaporRoute
here working fine from IOS app with Vapor built in route

## from server create new all work as expected
app.post("device_check_and_login") { request async throws -> SendUserVerificationResponse in

        let input = try request.content.decode(VerifySMSIn.self)

        do {
            _ = try await input.phoneNumber.varifyMobileNumber()
        } catch {
            print("\(error)")
        }

        do {
            let res = try await deviceCheckHandler(request: request, route: .validatreDeviceToken(input.deviceCheckdata))
            if try await res.encodeResponse(for: request).status != .ok {
                let msg = "deviceCheckHandler failded for validatreDeviceToken authenticationHandler"
                request.application.logger.notice("\(msg)")
                throw Abort(.forbidden, reason: "\(msg)")
            } else {
                print(#line, try await res.encodeResponse(for: request).status)
            }

        } catch {
            print(#line, "\(error.localizedDescription)")
        }

        let verification = input

        let phoneNumber = verification.phoneNumber.removingInvalidCharacters
        let code = String.randomDigits(ofLength: 6)
        let message = "Hello there! Your verification code is \(code)"

        guard let SENDER_NUMBER = Environment.get("SENDER_NUMBER") else {
            fatalError("No value was found at the given public key environment 'SENDER_NUMBER'")
        }
        let sms = OutgoingSMS(body: message, from: SENDER_NUMBER, to: phoneNumber)

        request.logger.notice("SMS is \(message)")

        switch request.application.environment {
        case .production:
            _ = try await request.application.twilio.send(sms).get()

            let smsAttempt = SMSVerificationAttempt(
                code: code,
                expiresAt: Date().addingTimeInterval(5.0 * 60.0),
                phoneNumber: phoneNumber
            )

            _ = try await smsAttempt.save(on: request.db).get()
            let attemptId = try! smsAttempt.requireID()
            return SendUserVerificationResponse(
                phoneNumber: phoneNumber,
                attemptId: attemptId
            )

        case .development:

            let smsAttempt = SMSVerificationAttempt(
                code: "336699",
                expiresAt: Date().addingTimeInterval(5.0 * 60.0),
                phoneNumber: phoneNumber
            )
            _ = try await smsAttempt.save(on: request.db).get()

            let attemptId = try! smsAttempt.requireID()
            return SendUserVerificationResponse(phoneNumber: phoneNumber, attemptId: attemptId)

        default:
            let smsAttempt = SMSVerificationAttempt(
                code: "336699",
                expiresAt: Date().addingTimeInterval(5.0 * 60.0),
                phoneNumber: phoneNumber
            )
            _ = smsAttempt.save(on: request.db).map { smsAttempt }

            let attemptId = try! smsAttempt.requireID()
            return SendUserVerificationResponse(phoneNumber: phoneNumber, attemptId: attemptId)
        }
    }