75 lines
1.7 KiB
Go
75 lines
1.7 KiB
Go
package auth
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"net/http"
|
|
"time"
|
|
|
|
"git.bronku.xyz/bronku/cake-order-tracker/models"
|
|
)
|
|
|
|
func (a *Authenticator) getSession(r *http.Request) (models.Token, error) {
|
|
c, err := r.Cookie("token")
|
|
if err != nil {
|
|
return models.Token{}, err
|
|
}
|
|
session, ok := a.sessions[c.Value]
|
|
if !ok {
|
|
return models.Token{}, errors.New("session not found")
|
|
}
|
|
if time.Since(session.Expiration) > 0 {
|
|
delete(a.sessions, c.Value)
|
|
err := a.s.CleanSessions()
|
|
if err != nil {
|
|
fmt.Println("error cleaning the sessions", err)
|
|
}
|
|
return models.Token{}, errors.New("session expired")
|
|
}
|
|
return session, nil
|
|
}
|
|
|
|
func (a *Authenticator) login(w http.ResponseWriter, r *http.Request) {
|
|
err := r.ParseForm()
|
|
if err != nil {
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
login := r.PostFormValue("login")
|
|
password := r.PostFormValue("password")
|
|
if a.verifyCredentials(login, password) != nil {
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
cookie, err := a.newSession(login)
|
|
if err != nil {
|
|
w.Header().Set("content-type", "text/html")
|
|
fmt.Fprint(w, "internal server error")
|
|
return
|
|
}
|
|
http.SetCookie(w, &cookie)
|
|
http.Redirect(w, r, "/", http.StatusFound)
|
|
}
|
|
|
|
func (a *Authenticator) logout(w http.ResponseWriter, r *http.Request) {
|
|
var cookie http.Cookie
|
|
cookie.Name = "token"
|
|
cookie.Value = "nil"
|
|
cookie.HttpOnly = true
|
|
cookie.SameSite = http.SameSiteStrictMode
|
|
cookie.Path = "/"
|
|
http.SetCookie(w, &cookie)
|
|
http.Redirect(w, r, "/", http.StatusFound)
|
|
c, err := r.Cookie("token")
|
|
if err != nil {
|
|
return
|
|
}
|
|
_, ok := a.sessions[c.Value]
|
|
if !ok {
|
|
return
|
|
}
|
|
fmt.Println("removing session")
|
|
delete(a.sessions, c.Value)
|
|
err = a.s.RevokeSession(c.Value)
|
|
fmt.Println(err)
|
|
}
|