94 lines
2 KiB
Go
94 lines
2 KiB
Go
package auth
|
|
|
|
import (
|
|
_ "embed"
|
|
"fmt"
|
|
"log"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/Bronku/iroon/internal/models"
|
|
"github.com/Bronku/iroon/internal/store"
|
|
)
|
|
|
|
//go:embed templates/login.html
|
|
var loginPage string
|
|
|
|
//go:embed templates/wrongPassword.html
|
|
var wrongPassword string
|
|
|
|
type Authenticator struct {
|
|
sessions map[string]models.Token
|
|
s *store.Store
|
|
}
|
|
|
|
func New(s *store.Store) *Authenticator {
|
|
var out Authenticator
|
|
var err error
|
|
out.s = s
|
|
out.sessions, err = s.GetSessions()
|
|
fmt.Println(out.sessions)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
return &out
|
|
}
|
|
|
|
func (a *Authenticator) login(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method != http.MethodPost {
|
|
w.Header().Set("content-type", "text/html")
|
|
fmt.Fprint(w, loginPage)
|
|
return
|
|
}
|
|
err := r.ParseForm()
|
|
if err != nil {
|
|
w.Header().Set("content-type", "text/html")
|
|
fmt.Fprint(w, loginPage)
|
|
return
|
|
}
|
|
login := r.PostFormValue("login")
|
|
password := r.PostFormValue("password")
|
|
if login != "admin" || password != "secret" {
|
|
w.Header().Set("content-type", "text/html")
|
|
fmt.Fprint(w, wrongPassword)
|
|
return
|
|
}
|
|
cookie, err := a.newSession(login)
|
|
// #todo: change to a some sort of internal server error
|
|
if err != nil {
|
|
w.Header().Set("content-type", "text/html")
|
|
fmt.Fprint(w, "internal server error")
|
|
return
|
|
}
|
|
http.SetCookie(w, &cookie)
|
|
http.Redirect(w, r, "/", http.StatusFound)
|
|
}
|
|
|
|
func (a *Authenticator) Middleware(in http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
if r.URL.String() == "/login" {
|
|
a.login(w, r)
|
|
return
|
|
}
|
|
c, err := r.Cookie("token")
|
|
if err != nil {
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
value, ok := a.sessions[c.Value]
|
|
if !ok {
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
if time.Since(value.Expiration) > 0 {
|
|
delete(a.sessions, c.Value)
|
|
err := a.s.CleanSessions()
|
|
if err != nil {
|
|
fmt.Println("error cleaning the sessions", err)
|
|
}
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
in.ServeHTTP(w, r)
|
|
})
|
|
}
|