package handlers import ( "apjournal/internal/models" "apjournal/pkg/utils" "encoding/json" "html/template" "net/http" "strings" "time" ) func abortWithError(w http.ResponseWriter, msg string) { tmpl := template.Must(template.ParseGlob("components/*.html")) tmpl.ExecuteTemplate(w, "error", msg) } func (h *Handlers) HandleLogin(w http.ResponseWriter, r *http.Request) { r.ParseForm() username := r.PostFormValue("username") if username == "" { msg := "username not provided" h.log.Error(msg) abortWithError(w, msg) return } password := r.PostFormValue("password") if password == "" { msg := "password not provided" h.log.Error(msg) abortWithError(w, msg) return } cleanName := utils.RemoveSpacesFromStr(username) cookie, err := h.makeCookie(cleanName, r.RemoteAddr) if err != nil { h.log.Error("failed to login", "error", err) abortWithError(w, err.Error()) return } http.SetCookie(w, cookie) // http.Redirect(w, r, "/", 302) tmpl, err := template.ParseGlob("components/*.html") if err != nil { panic(err) } userScore, err := h.repo.DBUserScoreGet(cleanName) if err != nil { h.log.Warn("got db err", "err", err) if err := h.repo.DBUserScoreCreate(&us); err != nil { panic(err) } tmpl.ExecuteTemplate(w, "main", nil) return } userScore.Actions, err = h.repo.DBActionList(cleanName) if err != nil { panic(err) } tmpl.ExecuteTemplate(w, "main", userScore) } func (h *Handlers) makeCookie(username string, remote string) (*http.Cookie, error) { // Create a new random session token // sessionToken := xid.New().String() sessionToken := "token" expiresAt := time.Now().Add(time.Duration(h.cfg.SessionLifetime) * time.Second) // Set the token in the session map, along with the session information session := &models.Session{ Username: username, Expiry: expiresAt, } // TODO: write session to db cookie := &http.Cookie{ Name: "session_token", Value: sessionToken, Secure: true, HttpOnly: true, SameSite: http.SameSiteNoneMode, Domain: h.cfg.ServerConfig.Host, } h.log.Info("check remote addr for cookie set", "remote", remote, "session", session) if strings.Contains(remote, "192.168.0") { // no idea what is going on cookie.Domain = "192.168.0.101" } // set ctx? // c.Set("username", username) return cookie, nil } func (h *Handlers) cacheGetSession(key string) (*models.Session, error) { userSessionB, err := h.mc.Get(key) if err != nil { return nil, err } var us *models.Session if err := json.Unmarshal(userSessionB, &us); err != nil { return nil, err } return us, nil } func (h *Handlers) cacheSetSession(key string, session *models.Session) error { sesb, err := json.Marshal(session) if err != nil { return err } h.mc.Set(key, sesb) // expire in 10 min h.mc.Expire(key, 10*60) return nil }