A robust and secure Todo List API built with Go, Gin, and PostgreSQL. This project follows clean architectural patterns, uses sqlc for type-safe database interactions, and implements JWT-based authentication with dual support for Cookies and Authorization headers.

• User Authentication: Secure Registration and Login using JWT.
• Dual Auth Support: Works with both Authorization: Bearer <token> headers and HTTP-only Cookies.
• User Isolation: Users can only create, view, update, and delete their own todos.
• Type-Safe Database: Uses sqlc for generating type-safe Go code from SQL queries.
• Centralized Error Handling: Custom middleware for consistent JSON error responses.
• Logging: Integrated request logging middleware.

• Languange: Go (Golang)
• Web Framework: Gin Gonic
• Database: PostgreSQL
• ORM/Query Builder: sqlc
• Driver: pgx/v5
• Security: JWT (golang-jwt/v5) & bcrypt for password hashing.

├── db/              # Generated sqlc code (DB interfaces and models)
├── handlers/        # API route handlers (Auth and Todo logic)
├── middleware/      # Gin middlewares (Auth, Log, Error)
├── migrations/      # SQL migration files
├── models/          # Data Transfer Objects (DTOs) for requests/responses
├── query/           # Raw SQL queries used by sqlc
├── utils/           # Helper functions (Hashing, etc.)
├── main.go          # Application entry point
├── sqlc.yaml        # sqlc configuration
└── .env             # Environment variables (not tracked)

• Go 1.21+
• PostgreSQL
• sqlc (optional, for regenerating queries)

Create a PostgreSQL database and apply the migrations. You can find the schema in the query/ or migrations/ directory.

Create a .env file in the root directory:

JWT_SECRET=your_secret_key_here

go mod tidy
go run main.go

The server will start at http://localhost:8080.

If you modify query/query.sql, regenerate the Go code using:

sqlc generate

This project is open-source and available under the MIT License.