chore: build

backend/internal/modules/auth/service.go

@@ -16,7 +16,7 @@ import (
 // Defined here (consumer side) rather than depending on the full
 // users.Repository, so auth only ever reads user records, never writes them.
 type UserFinder interface {
-	FindByEmail(ctx context.Context, email string) (*users.User, error)
+	FindByUsername(ctx context.Context, username string) (*users.User, error)
 	FindByID(ctx context.Context, id uuid.UUID) (*users.User, error)
 }
 
@@ -43,8 +43,8 @@ func (s *Service) RefreshTTL() time.Duration { return s.refreshTTL }
 // Login authenticates a user for a specific space (aud) and enforces that
 // the account's role matches that space (an admin account cannot log into
 // the customer space and vice versa, even before the customer module ships).
-func (s *Service) Login(ctx context.Context, aud security.Audience, expectedRole, email, password string) (*TokenPair, *users.User, error) {
-	user, err := s.users.FindByEmail(ctx, email)
+func (s *Service) Login(ctx context.Context, aud security.Audience, expectedRole, username, password string) (*TokenPair, *users.User, error) {
+	user, err := s.users.FindByUsername(ctx, username)
 	if err != nil {
 		if errors.Is(err, users.ErrNotFound) {
 			return nil, nil, ErrInvalidCredentials