Version 0.2.0

Changes:
- forbid to overwrite secrets of other users
- add some logs of success
- add validation on code (length 50)
- use same limiter for POST requests

internal/httpserver/server.go

@@ -30,6 +30,7 @@ func New(
 	limiter *ratelimit.Limiter,
 	m metrics.Metrics,
 	trustedProxies []string,
+	logger *zap.Logger,
 ) (*gin.Engine, error) {
 	router := gin.New()
 	// Strict-server handlers only see context.Context (via *gin.Context, which
@@ -54,13 +55,13 @@ func New(
 	wrapper := api.ServerInterfaceWrapper{Handler: strictHandler}
 
 	router.POST("/api/v1/getValue",
-		api.InstrumentMiddleware("getValue", m.HTTP),
+		api.InstrumentMiddleware("getValue", m.HTTP, logger),
 		api.RateLimitMiddleware(limiter, m.Value),
 		wrapper.GetValue,
 	)
 	router.POST("/api/v1/setValue",
-		api.InstrumentMiddleware("setValue", m.HTTP),
-		api.BasicAuthMiddleware(users, m.Value),
+		api.InstrumentMiddleware("setValue", m.HTTP, logger),
+		api.BasicAuthMiddleware(users, limiter, m.Value),
 		wrapper.SetValue,
 	)