:boom: use json instead of forms

gleam.toml

···
 mist = ">= 5.0.3 and < 6.0.0"
 gleam_otp = ">= 1.1.0 and < 2.0.0"
 gleam_json = ">= 3.0.2 and < 4.0.0"
-formal = ">= 3.0.0 and < 4.0.0"
 envoy = ">= 1.0.2 and < 2.0.0"
 gleam_http = ">= 4.1.1 and < 5.0.0"
 youid = ">= 1.5.1 and < 2.0.0"

manifest.toml

···
   { name = "eval", version = "1.0.0", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "eval", source = "hex", outer_checksum = "264DAF4B49DF807F303CA4A4E4EBC012070429E40BE384C58FE094C4958F9BDA" },
   { name = "exception", version = "2.1.0", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "exception", source = "hex", outer_checksum = "329D269D5C2A314F7364BD2711372B6F2C58FA6F39981572E5CA68624D291F8C" },
   { name = "filepath", version = "1.1.2", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "filepath", source = "hex", outer_checksum = "B06A9AF0BF10E51401D64B98E4B627F1D2E48C154967DA7AF4D0914780A6D40A" },
-  { name = "formal", version = "3.0.0", build_tools = ["gleam"], requirements = ["gleam_stdlib", "gleam_time"], otp_app = "formal", source = "hex", outer_checksum = "686D0C4C9CB36397DBAC2EC8C6ED9BD0F81B2DF2E88F75A7DB75F56768DDD8FC" },
   { name = "glam", version = "2.0.3", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "glam", source = "hex", outer_checksum = "237C2CE218A2A0A5D46D625F8EF5B78F964BC91018B78D692B17E1AB84295229" },
   { name = "gleam_community_ansi", version = "1.4.3", build_tools = ["gleam"], requirements = ["gleam_community_colour", "gleam_regexp", "gleam_stdlib"], otp_app = "gleam_community_ansi", source = "hex", outer_checksum = "8A62AE9CC6EA65BEA630D95016D6C07E4F9973565FA3D0DE68DC4200D8E0DD27" },
   { name = "gleam_community_colour", version = "2.0.2", build_tools = ["gleam"], requirements = ["gleam_json", "gleam_stdlib"], otp_app = "gleam_community_colour", source = "hex", outer_checksum = "E34DD2C896AC3792151EDA939DA435FF3B69922F33415ED3C4406C932FBE9634" },
···
 argv = { version = ">= 1.0.2 and < 2.0.0" }
 cors_builder = { version = ">= 2.0.6 and < 3.0.0" }
 envoy = { version = ">= 1.0.2 and < 2.0.0" }
-formal = { version = ">= 3.0.0 and < 4.0.0" }
 gleam_community_ansi = { version = ">= 1.4.3 and < 2.0.0" }
 gleam_crypto = { version = ">= 1.5.1 and < 2.0.0" }
 gleam_erlang = { version = ">= 1.3.0 and < 2.0.0" }

src/app/domain/user/signup.gleam

···
 import app/web
 import app/web/context.{type Context}
 import argus
-import formal/form
+import gleam/dynamic/decode
 import gleam/http
 import gleam/json
 import gleam/list
···
   ctx ctx: Context,
 ) -> wisp.Response {
   use <- wisp.require_method(req, http.Post)
-  use form_data <- wisp.require_form(req)
-  let form_result =
-    signup_form()
-    |> form.add_values(form_data.values)
-    |> form.run
+  use body <- wisp.require_json(req)
 
-  case form_result {
-    Error(_) -> wisp.unprocessable_content()
+  case decode.run(body, sign_up_decoder()) {
+    Error(err) -> web.handle_decode_error(err)
     Ok(body) -> handle_body(req, body, ctx)
   }
 }
···
     phone_number: String,
     email: String,
     password: String,
+    confirm_password: String,
     user_role: String,
   )
 }
 
-/// 󱐁  A form that decodes the `SignUp` value.
-fn signup_form() -> form.Form(SignUp) {
-  form.new({
-    use name <- form.field("nome", {
-      form.parse_string |> form.check_not_empty()
-    })
-
-    use registration <- form.field("matricula", {
-      form.parse_string |> form.check_not_empty()
-    })
-
-    use phone_number <- form.field("telefone", {
-      form.parse_phone_number |> form.check_not_empty()
-    })
-
-    use email <- form.field("email", {
-      form.parse_email |> form.check_not_empty()
-    })
-
-    use password <- form.field("senha", {
-      form.parse_string |> form.check_not_empty()
-    })
-
-    use _ <- form.field("confirma_senha", {
-      form.parse_string |> form.check_confirms(password)
-    })
-
-    use user_role <- form.field("cargo", {
-      form.parse_string |> form.check_not_empty()
-    })
-
-    form.success(SignUp(
-      name:,
-      registration:,
-      phone_number:,
-      email:,
-      password:,
-      user_role:,
-    ))
-  })
+fn sign_up_decoder() -> decode.Decoder(SignUp) {
+  use name <- decode.field("nome", decode.string)
+  use registration <- decode.field("matricula", decode.string)
+  use phone_number <- decode.field("telefone", decode.string)
+  use email <- decode.field("email", decode.string)
+  use password <- decode.field("senha", decode.string)
+  use confirm_password <- decode.field("confirma_senha", decode.string)
+  use user_role <- decode.field("cargo", decode.string)
+  decode.success(SignUp(
+    name:,
+    registration:,
+    phone_number:,
+    email:,
+    password:,
+    confirm_password:,
+    user_role:,
+  ))
 }
 
 fn handle_database_error(err: pog.QueryError) -> wisp.Response {

src/app/domain/user/update_user_password.gleam

···
 import app/web
 import app/web/context.{type Context}
 import argus
-import formal/form
 import gleam/bool
+import gleam/dynamic/decode
 import gleam/http
 import gleam/list
 import gleam/result
···
   ctx ctx: Context,
 ) -> wisp.Response {
   use <- wisp.require_method(req, http.Put)
-  use form_data <- wisp.require_form(req)
-  let form_result =
-    update_password_form()
-    |> form.add_values(form_data.values)
-    |> form.run()
+  use body <- wisp.require_json(req)
 
-  case form_result {
+  case decode.run(body, request_body_decoder()) {
     Ok(form_data) -> handle_form_data(request: req, ctx:, form_data:)
-    Error(_) -> {
-      let resp = wisp.unprocessable_content()
-
-      "Formulário inválido"
-      |> wisp.Text
-      |> wisp.set_body(resp, _)
-    }
+    Error(err) -> web.handle_decode_error(err)
   }
 }
 
 fn handle_form_data(
-  request request: wisp.Request,
+  request req: wisp.Request,
   ctx ctx: Context,
   form_data form_data: RequestBody,
 ) -> wisp.Response {
-  case update_user_password(request:, ctx:, form_data:) {
+  case update_user_password(request: req, ctx:, form_data:) {
     Error(err) -> handle_error(err)
     Ok(_) -> {
       let resp = wisp.ok()
···
 }
 
 fn update_user_password(
-  request request: wisp.Request,
+  request req: wisp.Request,
   ctx ctx: Context,
   form_data form_data: RequestBody,
 ) -> Result(pog.Returned(Nil), UpdatePasswordError) {
   use user_uuid <- result.try(
-    user.extract_uuid(request:, cookie_name: user.uuid_cookie_name)
+    user.extract_uuid(request: req, cookie_name: user.uuid_cookie_name)
     |> result.map_error(AccessControl),
   )
 
···
   row.password_hash
 }
 
-fn update_password_form() -> form.Form(RequestBody) {
-  form.new({
-    use current_password <- form.field("senhaAtual", {
-      form.parse_string |> form.check_not_empty()
-    })
-    use new_password <- form.field("novaSenha", {
-      form.parse_string
-      |> form.check_not_empty()
-      |> form.check(fn(value) {
-        case value == current_password {
-          False -> Ok(value)
-          True -> Error("Nova senha deve ser diferente da atual")
-        }
-      })
-    })
-
-    use _ <- form.field("confirmarSenha", {
-      form.parse_string |> form.check_confirms(new_password)
-    })
-
-    // Success!
-    RequestBody(current_password:, new_password:)
-    |> form.success()
-  })
+type RequestBody {
+  RequestBody(
+    current_password: String,
+    new_password: String,
+    confirm_password: String,
+  )
 }
 
-type RequestBody {
-  RequestBody(current_password: String, new_password: String)
+fn request_body_decoder() -> decode.Decoder(RequestBody) {
+  use current_password <- decode.field("senhaAtual", decode.string)
+  use new_password <- decode.field("novaSenha", decode.string)
+  use confirm_password <- decode.field("confirmarSenha", decode.string)
+  decode.success(RequestBody(
+    current_password:,
+    new_password:,
+    confirm_password:,
+  ))
 }
 
 ///   Updating an user's password can fail

test/user_test.gleam

···
   let dummy_password = wisp.random_string(10)
   let req =
     simulate.browser_request(http.Post, "/admin/signup")
-    |> simulate.form_body([
-      #("nome", wisp.random_string(10)),
-      #("matricula", int.random(111) |> int.to_string),
-      #("telefone", int.random(9_999_999_999) |> int.to_string),
-      #("email", wisp.random_string(12) <> "@email.com"),
-      #("senha", dummy_password),
-      #("confirma_senha", dummy_password),
-      #("cargo", role.to_string_pt_br(dummy.random_role())),
-    ])
+    |> simulate.json_body(
+      json.object([
+        #("nome", wisp.random_string(10) |> json.string),
+        #("matricula", int.random(111) |> int.to_string |> json.string),
+        #("telefone", int.random(9_999_999_999) |> int.to_string |> json.string),
+        #("email", { wisp.random_string(12) <> "@email.com" } |> json.string),
+        #("senha", dummy_password |> json.string),
+        #("confirma_senha", dummy_password |> json.string),
+        #("cargo", dummy.random_role() |> role.to_string_pt_br() |> json.string),
+      ]),
+    )
 
   let resp = http_router.handle_request(req, ctx)
   assert resp.status == 401 as "Endpoint access should be restricted"
···
 
   let req =
     simulate.browser_request(http.Post, "/admin/signup")
-    |> simulate.form_body([
-      #("nome", wisp.random_string(10)),
-      #("matricula", taken_registration),
-      #("telefone", int.random(9_999_999_999) |> int.to_string),
-      #("email", wisp.random_string(5) <> "@email.com"),
-      #("senha", dummy_pswd),
-      #("confirma_senha", dummy_pswd),
-      #("cargo", role.to_string_pt_br(dummy.random_role())),
-    ])
+    |> simulate.json_body(
+      json.object([
+        #("nome", wisp.random_string(10) |> json.string),
+        #("matricula", taken_registration |> json.string),
+        #("telefone", int.random(9_999_999_999) |> int.to_string |> json.string),
+        #("email", { wisp.random_string(12) <> "@email.com" } |> json.string),
+        #("senha", dummy_pswd |> json.string),
+        #("confirma_senha", dummy_pswd |> json.string),
+        #("cargo", dummy.random_role() |> role.to_string_pt_br() |> json.string),
+      ]),
+    )
 
   let with_auth = app_test.with_authorization(next: req)
   let resp = http_router.handle_request(with_auth, ctx)
···
 
   let req =
     simulate.browser_request(http.Post, "/admin/signup")
-    |> simulate.form_body([
-      #("nome", wisp.random_string(10)),
-      #("matricula", int.random(111) |> int.to_string),
-      #("telefone", int.random(9_999_999_999) |> int.to_string),
-      #("email", taken_email),
-      #("senha", dummy_pswd),
-      #("confirma_senha", dummy_pswd),
-      #("cargo", role.to_string_pt_br(dummy.random_role())),
-    ])
+    |> simulate.json_body(
+      json.object([
+        #("nome", wisp.random_string(10) |> json.string),
+        #("matricula", int.random(111) |> int.to_string |> json.string),
+        #("telefone", int.random(9_999_999_999) |> int.to_string |> json.string),
+        #("email", taken_email |> json.string),
+        #("senha", dummy_pswd |> json.string),
+        #("confirma_senha", dummy_pswd |> json.string),
+        #("cargo", dummy.random_role() |> role.to_string_pt_br() |> json.string),
+      ]),
+    )
 
   let with_auth = app_test.with_authorization(next: req)
   let resp = http_router.handle_request(with_auth, ctx)
···
 
   let req =
     simulate.browser_request(http.Post, "/admin/signup")
-    |> simulate.form_body([
-      #("nome", wisp.random_string(10)),
-      #("matricula", int.random(111) |> int.to_string),
-      #("telefone", taken_phone),
-      #("email", wisp.random_string(5) <> "@email.com"),
-      #("senha", dummy_pswd),
-      #("confirma_senha", dummy_pswd),
-      #("cargo", role.to_string_pt_br(dummy.random_role())),
-    ])
+    |> simulate.json_body(
+      json.object([
+        #("nome", wisp.random_string(10) |> json.string),
+        #("matricula", int.random(111) |> int.to_string |> json.string),
+        #("telefone", taken_phone |> json.string),
+        #("email", { wisp.random_string(12) <> "@email.com" } |> json.string),
+        #("senha", dummy_pswd |> json.string),
+        #("confirma_senha", dummy_pswd |> json.string),
+        #("cargo", dummy.random_role() |> role.to_string_pt_br() |> json.string),
+      ]),
+    )
 
   let with_auth = app_test.with_authorization(next: req)
   let resp = http_router.handle_request(with_auth, ctx)
···
 
   let new_user_req =
     simulate.browser_request(http.Post, signup_path)
-    |> simulate.form_body([
-      #("nome", wisp.random_string(10)),
-      #("matricula", dummy_registration),
-      #("telefone", dummy_phone),
-      #("email", dummy_email),
-      #("senha", dummy_password),
-      #("confirma_senha", dummy_password),
-      #("cargo", role.to_string_pt_br(role.Firefighter)),
-    ])
+    |> simulate.json_body(
+      json.object([
+        #("nome", wisp.random_string(10) |> json.string),
+        #("matricula", dummy_registration |> json.string),
+        #("telefone", dummy_phone |> json.string),
+        #("email", dummy_email |> json.string),
+        #("senha", dummy_password |> json.string),
+        #("confirma_senha", dummy_password |> json.string),
+        #("cargo", role.to_string_pt_br(role.Firefighter) |> json.string),
+      ]),
+    )
 
   let with_auth = app_test.with_authorization(new_user_req)
   let new_user_resp = http_router.handle_request(with_auth, ctx)