golangci lint 적용

backend/cmd/keto_test/main.go

@@ -13,7 +13,7 @@ func main() {
 	os.Setenv("KETO_READ_URL", "http://keto:4466")
 	os.Setenv("KETO_WRITE_URL", "http://keto:4467")
 
-keto := service.NewKetoService()
+	keto := service.NewKetoService()
 	ctx := context.Background()
 
 	userID := "test-user-id"

backend/cmd/keygen/main.go

@@ -35,15 +35,25 @@ func main() {
 	godotenv.Load("backend/.env")
 
 	pgHost := os.Getenv("DB_HOST")
-	if pgHost == "" { pgHost = "localhost" }
+	if pgHost == "" {
+		pgHost = "localhost"
+	}
 	pgPort := os.Getenv("DB_PORT")
-	if pgPort == "" { pgPort = "5432" }
+	if pgPort == "" {
+		pgPort = "5432"
+	}
 	pgUser := os.Getenv("DB_USER")
-	if pgUser == "" { pgUser = "baron" }
+	if pgUser == "" {
+		pgUser = "baron"
+	}
 	pgPass := os.Getenv("DB_PASSWORD")
-	if pgPass == "" { pgPass = "password" }
+	if pgPass == "" {
+		pgPass = "password"
+	}
 	pgName := os.Getenv("DB_NAME")
-	if pgName == "" { pgName = "baron_sso" }
+	if pgName == "" {
+		pgName = "baron_sso"
+	}
 
 	dsn := fmt.Sprintf("host=%s user=%s password=%s dbname=%s port=%s sslmode=disable",
 		pgHost, pgUser, pgPass, pgName, pgPort)

backend/cmd/server/main.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"baron-sso-backend/internal/bootstrap"
 	"baron-sso-backend/internal/domain"
 	"baron-sso-backend/internal/handler"
 	"baron-sso-backend/internal/idp"
@@ -28,8 +29,6 @@ import (
 	"gorm.io/driver/postgres"
 	"gorm.io/gorm"
 	gormLogger "gorm.io/gorm/logger"
-
-	"baron-sso-backend/internal/bootstrap"
 )
 
 func getEnv(key, fallback string) string {
@@ -492,9 +491,9 @@ func main() {
 	auth.Post("/login/code/verify", authHandler.VerifyLoginCode)
 	auth.Post("/login/code/verify-short", authHandler.VerifyLoginShortCode)
 	auth.Post("/password/login", authHandler.PasswordLogin)
-			auth.Get("/consent", authHandler.GetConsentRequest)
+	auth.Get("/consent", authHandler.GetConsentRequest)
-			auth.Post("/consent/accept", authHandler.AcceptConsentRequest)
+	auth.Post("/consent/accept", authHandler.AcceptConsentRequest)
-			auth.Post("/consent/reject", authHandler.RejectConsentRequest)
+	auth.Post("/consent/reject", authHandler.RejectConsentRequest)
 
 	auth.Post("/oidc/login/accept", authHandler.AcceptOidcLoginRequest)
 

backend/internal/domain/auth_models.go

@@ -1,12 +1,12 @@
 package domain
 
 type EnchantedLinkInitRequest struct {
-	LoginID string `json:"loginId"`
+	LoginID  string `json:"loginId"`
-	URI     string `json:"uri,omitempty"`    // Redirect URI (optional for polling flow)
+	URI      string `json:"uri,omitempty"`    // Redirect URI (optional for polling flow)
-	Method  string `json:"method,omitempty"` // "email" or "sms"
+	Method   string `json:"method,omitempty"` // "email" or "sms"
 	CodeOnly bool   `json:"codeOnly,omitempty"`
-	DryRun  bool   `json:"dryRun,omitempty"`
+	DryRun   bool   `json:"dryRun,omitempty"`
-	DrySend bool   `json:"drySend,omitempty"`
+	DrySend  bool   `json:"drySend,omitempty"`
 }
 
 type EnchantedLinkInitResponse struct {
@@ -68,15 +68,15 @@ type SignupRequest struct {
 // User Profile Models
 
 type UserProfileResponse struct {
-	ID              string `json:"id"`
+	ID              string         `json:"id"`
-	Email           string `json:"email"`
+	Email           string         `json:"email"`
-	Name            string `json:"name"`
+	Name            string         `json:"name"`
-	Phone           string `json:"phone"`
+	Phone           string         `json:"phone"`
-	Role            string `json:"role"` // 추가
+	Role            string         `json:"role"` // 추가
-	Department      string  `json:"department"`
+	Department      string         `json:"department"`
 	AffiliationType string         `json:"affiliationType"`
 	CompanyCode     string         `json:"companyCode,omitempty"`
-	TenantID        *string        `json:"tenantId,omitempty"` // 추가
+	TenantID        *string        `json:"tenantId,omitempty"`       // 추가
 	RelyingPartyID  *string        `json:"relyingPartyId,omitempty"` // 추가
 	Metadata        map[string]any `json:"metadata,omitempty"`
 	Tenant          *Tenant        `json:"tenant,omitempty"`

backend/internal/domain/federation_models.go

@@ -17,15 +17,15 @@ const (
 
 // IdentityProviderConfig stores the configuration for an external Identity Provider.
 type IdentityProviderConfig struct {
-	ID           string         `gorm:"primaryKey;type:uuid;default:gen_random_uuid()" json:"id"`
+	ID           string       `gorm:"primaryKey;type:uuid;default:gen_random_uuid()" json:"id"`
-	ClientID     string         `gorm:"type:uuid;not null;index" json:"client_id"` // Replaces TenantID
+	ClientID     string       `gorm:"type:uuid;not null;index" json:"client_id"` // Replaces TenantID
-	ProviderType ProviderType   `gorm:"type:varchar(10);not null" json:"provider_type"`
+	ProviderType ProviderType `gorm:"type:varchar(10);not null" json:"provider_type"`
-	DisplayName  string         `gorm:"not null" json:"display_name"`
+	DisplayName  string       `gorm:"not null" json:"display_name"`
-	Status       string         `gorm:"default:'active'" json:"status"`
+	Status       string       `gorm:"default:'active'" json:"status"`
 
 	// OIDC Specific Fields
-	IssuerURL       *string `gorm:"null" json:"issuer_url,omitempty"`
+	IssuerURL        *string `gorm:"null" json:"issuer_url,omitempty"`
-	OIDCClientID    *string `gorm:"null" json:"oidc_client_id,omitempty"`    // Renamed from ClientID
+	OIDCClientID     *string `gorm:"null" json:"oidc_client_id,omitempty"`     // Renamed from ClientID
 	OIDCClientSecret *string `gorm:"null" json:"oidc_client_secret,omitempty"` // Renamed from ClientSecret
 	// Scopes are space-separated
 	Scopes *string `gorm:"null" json:"scopes,omitempty"`

backend/internal/domain/models.go

@@ -7,17 +7,17 @@ import (
 
 // AuditLog represents a single audit event
 type AuditLog struct {
-	EventID   string    `json:"event_id"`
+	EventID    string    `json:"event_id"`
-	Timestamp time.Time `json:"timestamp"`
+	Timestamp  time.Time `json:"timestamp"`
-	UserID    string    `json:"user_id"`
+	UserID     string    `json:"user_id"`
-	SessionID string    `json:"session_id,omitempty"`
+	SessionID  string    `json:"session_id,omitempty"`
-	EventType string    `json:"event_type"` // e.g., "login_success", "login_failed", "otp_sent"
+	EventType  string    `json:"event_type"` // e.g., "login_success", "login_failed", "otp_sent"
-	Status    string    `json:"status"`     // e.g., "success", "failure"
+	Status     string    `json:"status"`     // e.g., "success", "failure"
-	AuthMethod string   `json:"auth_method,omitempty"`
+	AuthMethod string    `json:"auth_method,omitempty"`
-	IPAddress string    `json:"ip_address"`
+	IPAddress  string    `json:"ip_address"`
-	UserAgent string    `json:"user_agent"`
+	UserAgent  string    `json:"user_agent"`
-	DeviceID  string    `json:"device_id,omitempty"`
+	DeviceID   string    `json:"device_id,omitempty"`
-	Details   string    `json:"details,omitempty"` // JSON string or simple text
+	Details    string    `json:"details,omitempty"` // JSON string or simple text
 }
 
 // AuditRepository defines interface for storing logs

backend/internal/domain/user_group.go

@@ -31,4 +31,3 @@ func (ug *UserGroup) BeforeCreate(tx *gorm.DB) (err error) {
 	}
 	return
 }
-

backend/internal/handler/api_key_handler_test.go

@@ -26,7 +26,7 @@ func TestApiKeyHandler_CreateApiKey(t *testing.T) {
 	app.Post("/api-keys", h.CreateApiKey)
 
 	input := map[string]interface{}{
-		"name": "M2M Test",
+		"name":   "M2M Test",
 		"scopes": []string{"read", "write"},
 	}
 	body, _ := json.Marshal(input)

backend/internal/handler/auth_handler.go

@@ -3820,6 +3820,7 @@ func (h *AuthHandler) resolveCurrentProfile(c *fiber.Ctx) (*domain.UserProfileRe
 
 	return profile, nil
 }
+
 func (h *AuthHandler) resolveConsentSubject(c *fiber.Ctx) (string, error) {
 	token := h.getBearerToken(c)
 	if token != "" {

backend/internal/handler/auth_handler_login_test.go

@@ -31,12 +31,15 @@ type MockIdentityProvider struct {
 func (m *MockIdentityProvider) Name() string {
 	return "mock-idp"
 }
+
 func (m *MockIdentityProvider) GetMetadata() (*domain.IDPMetadata, error) {
 	return nil, nil
 }
+
 func (m *MockIdentityProvider) CreateUser(user *domain.BrokerUser, password string) (string, error) {
 	return "", nil
 }
+
 func (m *MockIdentityProvider) SignIn(loginID, password string) (*domain.AuthInfo, error) {
 	args := m.Called(loginID, password)
 	if args.Get(0) == nil {
@@ -44,27 +47,35 @@ func (m *MockIdentityProvider) SignIn(loginID, password string) (*domain.AuthInf
 	}
 	return args.Get(0).(*domain.AuthInfo), args.Error(1)
 }
+
 func (m *MockIdentityProvider) UserExists(loginID string) (bool, error) {
 	return true, nil
 }
+
 func (m *MockIdentityProvider) IssueSession(loginID string) (*domain.AuthInfo, error) {
 	return nil, nil
 }
+
 func (m *MockIdentityProvider) InitiateLinkLogin(loginID, returnTo string) (*domain.LinkLoginInit, error) {
 	return nil, nil
 }
+
 func (m *MockIdentityProvider) VerifyLoginCode(loginID, flowID, code string) (*domain.AuthInfo, error) {
 	return nil, nil
 }
+
 func (m *MockIdentityProvider) GetPasswordPolicy() (*domain.PasswordPolicy, error) {
 	return nil, nil
 }
+
 func (m *MockIdentityProvider) InitiatePasswordReset(loginID, redirectUrl string) error {
 	return nil
 }
+
 func (m *MockIdentityProvider) VerifyPasswordResetToken(token string) (*domain.AuthInfo, error) {
 	return nil, nil
 }
+
 func (m *MockIdentityProvider) UpdateUserPassword(loginID, newPassword string, r *http.Request) error {
 	return nil
 }
@@ -159,8 +170,8 @@ func TestPasswordLogin_OIDC_Success(t *testing.T) {
 	app := newAuthLoginTestApp(h)
 
 	body, _ := json.Marshal(map[string]string{
-		"loginId":        "user@example.com",
+		"loginId":         "user@example.com",
-		"password":       "password",
+		"password":        "password",
 		"login_challenge": "challenge-123",
 	})
 	req := httptest.NewRequest(http.MethodPost, "/api/v1/auth/login", bytes.NewReader(body))
@@ -219,8 +230,8 @@ func TestPasswordLogin_OIDC_InactiveClient(t *testing.T) {
 	app := newAuthLoginTestApp(h)
 
 	body, _ := json.Marshal(map[string]string{
-		"loginId":        "user@example.com",
+		"loginId":         "user@example.com",
-		"password":       "password",
+		"password":        "password",
 		"login_challenge": "challenge-inactive",
 	})
 	req := httptest.NewRequest(http.MethodPost, "/api/v1/auth/login", bytes.NewReader(body))

backend/internal/handler/auth_handler_oidc_test.go

@@ -1,6 +1,7 @@
 package handler
 
 import (
+	"baron-sso-backend/internal/service"
 	"bytes"
 	"encoding/json"
 	"io"
@@ -9,8 +10,6 @@ import (
 	"testing"
 
 	"github.com/gofiber/fiber/v2"
-
-	"baron-sso-backend/internal/service"
 )
 
 func newOidcLoginTestApp(h *AuthHandler) *fiber.App {

backend/internal/handler/federation_handler.go

@@ -12,17 +12,17 @@ import (
 
 // FederationHandler handles API requests for IdP federation.
 type FederationHandler struct {
-	fedSvc   *service.FederationService
+	fedSvc *service.FederationService
-	repo     repository.FederationRepository // For IdP Config CRUD
+	repo   repository.FederationRepository // For IdP Config CRUD
-	db       *gorm.DB                      // For tenant existence checks, etc. in CRUD
+	db     *gorm.DB                        // For tenant existence checks, etc. in CRUD
 }
 
 // NewFederationHandler creates a new FederationHandler.
 func NewFederationHandler(fedSvc *service.FederationService, repo repository.FederationRepository, db *gorm.DB) *FederationHandler {
 	return &FederationHandler{
-		fedSvc:   fedSvc,
+		fedSvc: fedSvc,
-		repo:     repo,
+		repo:   repo,
-		db:       db,
+		db:     db,
 	}
 }
 
@@ -108,8 +108,6 @@ func (h *FederationHandler) CreateIdpConfigForClient(c *fiber.Ctx) error {
 
 	return c.Status(fiber.StatusCreated).JSON(req)
 }
-
-
 // --- Deprecated Tenant-based IdP Config Methods ---
 
 // ListIdpConfigsForTenant handles listing all IdP configurations for a tenant.
@@ -158,4 +156,5 @@ func (h *FederationHandler) CreateIdpConfig(c *fiber.Ctx) error {
 
 	return c.Status(fiber.StatusCreated).JSON(req)
 }
+
 // TODO: Re-implement Update, Delete handlers for IdP Configs for Clients

backend/internal/handler/relying_party_handler.go

@@ -3,8 +3,9 @@ package handler
 import (
 	"baron-sso-backend/internal/domain"
 	"baron-sso-backend/internal/service"
-	"github.com/gofiber/fiber/v2"
 	"log/slog"
+
+	"github.com/gofiber/fiber/v2"
 )
 
 type RelyingPartyHandler struct {

backend/internal/handler/tenant_handler.go

@@ -139,8 +139,8 @@ func (h *TenantHandler) CreateTenant(c *fiber.Ctx) error {
 	}
 
 	var req struct {
-		Name        string   `json:"name"`
+		Name        string         `json:"name"`
-		Slug        string   `json:"slug"`
+		Slug        string         `json:"slug"`
 		Description string         `json:"description"`
 		Status      string         `json:"status"`
 		Domains     []string       `json:"domains"`
@@ -204,8 +204,8 @@ func (h *TenantHandler) UpdateTenant(c *fiber.Ctx) error {
 	}
 
 	var req struct {
-		Name        *string  `json:"name"`
+		Name        *string        `json:"name"`
-		Slug        *string  `json:"slug"`
+		Slug        *string        `json:"slug"`
 		Description *string        `json:"description"`
 		Status      *string        `json:"status"`
 		Domains     []string       `json:"domains"`

backend/internal/handler/tenant_handler_test.go

@@ -79,8 +79,8 @@ func TestTenantHandler_CreateTenant(t *testing.T) {
 	app.Post("/tenants", h.CreateTenant)
 
 	input := map[string]interface{}{
-		"name": "Test Tenant",
+		"name":    "Test Tenant",
-		"slug": "test-tenant",
+		"slug":    "test-tenant",
 		"domains": []string{"test.com"},
 	}
 	body, _ := json.Marshal(input)

backend/internal/handler/user_group_handler.go

@@ -3,6 +3,7 @@ package handler
 import (
 	"baron-sso-backend/internal/domain"
 	"baron-sso-backend/internal/service"
+
 	"github.com/gofiber/fiber/v2"
 )
 

backend/internal/middleware/rbac.go

@@ -3,8 +3,9 @@ package middleware
 import (
 	"baron-sso-backend/internal/domain"
 	"baron-sso-backend/internal/service"
-	"github.com/gofiber/fiber/v2"
 	"log/slog"
+
+	"github.com/gofiber/fiber/v2"
 )
 
 // RBACConfig defines the configuration for RBAC middleware

backend/internal/repository/gorm_federation_repository.go

@@ -3,6 +3,7 @@ package repository
 import (
 	"baron-sso-backend/internal/domain"
 	"context"
+
 	"gorm.io/gorm"
 )
 

backend/internal/repository/user_group_repository.go

@@ -50,4 +50,3 @@ func (r *userGroupRepository) ListByTenantID(ctx context.Context, tenantID strin
 	}
 	return groups, nil
 }
-

backend/internal/repository/user_repository.go

@@ -60,7 +60,6 @@ func (r *userRepository) FindByIDs(ctx context.Context, ids []string) ([]domain.
 	return users, nil
 }
 
-
 func (r *userRepository) ListByTenant(ctx context.Context, tenantID string) ([]domain.User, error) {
 	var users []domain.User
 	if err := r.db.WithContext(ctx).Where("tenant_id = ?", tenantID).Find(&users).Error; err != nil {

backend/internal/service/federation_service.go

@@ -8,14 +8,15 @@ import (
 	"fmt"
 	"time"
 
-	"golang.org/x/oauth2"
 	"github.com/coreos/go-oidc/v3/oidc"
+	"github.com/coreos/go-oidc/v3/oidc"
+	"golang.org/x/oauth2"
 )
 
 type FederationService struct {
-	repo       repository.FederationRepository
+	repo     repository.FederationRepository
-	hydraSvc   *HydraAdminService
+	hydraSvc *HydraAdminService
-	redisSvc   *RedisService
+	redisSvc *RedisService
 }
 
 func NewFederationService(repo repository.FederationRepository, hydraSvc *HydraAdminService, redisSvc *RedisService) *FederationService {
@@ -80,7 +81,6 @@ func (s *FederationService) HandleOIDCCallback(ctx context.Context, code, state
 	return "http://localhost:3000/login?login_successful=true", nil // Placeholder
 }
 
-
 func generateState() (string, error) {
 	b := make([]byte, 32)
 	_, err := rand.Read(b)

backend/internal/service/ory_service.go

@@ -75,8 +75,8 @@ func (o *OryProvider) CreateUser(user *domain.BrokerUser, password string) (stri
 	}
 
 	traits := map[string]interface{}{
-		"email":        user.Email,
+		"email": user.Email,
-		"name":         user.Name,
+		"name":  user.Name,
 	}
 	if user.PhoneNumber != "" {
 		traits["phone_number"] = user.PhoneNumber
@@ -521,10 +521,10 @@ type kratosRecoveryAddress struct {
 }
 
 type kratosIdentityFull struct {
-	SchemaID            string                   `json:"schema_id"`
+	SchemaID            string                    `json:"schema_id"`
-	Traits              map[string]interface{}   `json:"traits"`
+	Traits              map[string]interface{}    `json:"traits"`
 	VerifiableAddresses []kratosVerifiableAddress `json:"verifiable_addresses"`
-	RecoveryAddresses   []kratosRecoveryAddress  `json:"recovery_addresses"`
+	RecoveryAddresses   []kratosRecoveryAddress   `json:"recovery_addresses"`
 }
 
 func (o *OryProvider) patchIdentity(identityID string, ops []map[string]interface{}) error {

backend/internal/service/relying_party_service.go

@@ -176,4 +176,3 @@ func (s *relyingPartyService) mapHydraToDomain(client *domain.HydraClient) *doma
 	}
 	return rp
 }
-

backend/internal/service/relying_party_service_test.go

@@ -109,7 +109,6 @@ func TestRelyingPartyService_Create_Success(t *testing.T) {
 
 	svc := NewRelyingPartyService(hydraSvc, mockKeto)
 	rp, err := svc.Create(context.Background(), tenantID, inputClient)
-
 	if err != nil {
 		t.Fatalf("Create failed: %v", err)
 	}
@@ -200,7 +199,6 @@ func TestRelyingPartyService_Get_Success(t *testing.T) {
 
 	svc := NewRelyingPartyService(hydraSvc, mockKeto)
 	rp, hc, err := svc.Get(context.Background(), clientID)
-
 	if err != nil {
 		t.Fatalf("Get failed: %v", err)
 	}
@@ -233,7 +231,6 @@ func TestRelyingPartyService_Update_Success(t *testing.T) {
 
 	updateReq := domain.HydraClient{ClientName: "New Name"}
 	rp, err := svc.Update(context.Background(), clientID, updateReq)
-
 	if err != nil {
 		t.Fatalf("Update failed: %v", err)
 	}
@@ -272,7 +269,6 @@ func TestRelyingPartyService_Delete_Success(t *testing.T) {
 
 	svc := NewRelyingPartyService(hydraSvc, mockKeto)
 	err := svc.Delete(context.Background(), clientID)
-
 	if err != nil {
 		t.Fatalf("Delete failed: %v", err)
 	}

backend/internal/utils/slug.go

@@ -6,7 +6,7 @@ import (
 )
 
 var (
-	slugRegex = regexp.MustCompile(`^[a-z0-9-]+$`)
+	slugRegex     = regexp.MustCompile(`^[a-z0-9-]+$`)
 	reservedSlugs = map[string]bool{
 		"admin":    true,
 		"api":      true,