mirror of
https://github.com/Luzifer/cloudkeys-go.git
synced 2024-11-08 14:10:05 +00:00
90 lines
2.2 KiB
Go
90 lines
2.2 KiB
Go
package main
|
|
|
|
import (
|
|
"crypto/sha1"
|
|
"fmt"
|
|
"net/http"
|
|
"strconv"
|
|
|
|
"github.com/flosch/pongo2"
|
|
"github.com/gorilla/mux"
|
|
"github.com/gorilla/sessions"
|
|
)
|
|
|
|
func loginHandler(res http.ResponseWriter, r *http.Request, session *sessions.Session, ctx *pongo2.Context) (*string, error) {
|
|
var (
|
|
username = r.FormValue("username")
|
|
password = fmt.Sprintf("%x", sha1.Sum([]byte(cfg.PasswordSalt+r.FormValue("password"))))
|
|
)
|
|
|
|
if !storage.IsPresent(createUserFilename(username)) {
|
|
(*ctx)["error"] = true
|
|
return stringPointer("login.html"), nil
|
|
}
|
|
|
|
userFileRaw, err := storage.Read(createUserFilename(username))
|
|
if err != nil {
|
|
return nil, err // TODO: Handle in-app?
|
|
}
|
|
|
|
userFile, err := readDataObject(userFileRaw)
|
|
if err != nil {
|
|
return nil, err // TODO: Handle in-app?
|
|
}
|
|
|
|
if userFile.MetaData.Password != password {
|
|
(*ctx)["error"] = true
|
|
return stringPointer("login.html"), nil
|
|
}
|
|
|
|
auth, ok := session.Values["authorizedAccounts"].(authorizedAccounts)
|
|
if !ok {
|
|
auth = authorizedAccounts{}
|
|
}
|
|
|
|
for i, v := range auth {
|
|
if v.Name == username {
|
|
http.Redirect(res, r, fmt.Sprintf("u/%d/overview", i), http.StatusFound)
|
|
return nil, nil
|
|
}
|
|
}
|
|
|
|
auth = append(auth, authorizedAccount{
|
|
Name: username,
|
|
UserFile: createUserFilename(username),
|
|
})
|
|
|
|
session.Values["authorizedAccounts"] = auth
|
|
if err := session.Save(r, res); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
http.Redirect(res, r, fmt.Sprintf("u/%d/overview", len(auth)-1), http.StatusFound)
|
|
return nil, nil
|
|
}
|
|
|
|
func logoutHandler(res http.ResponseWriter, r *http.Request, session *sessions.Session, ctx *pongo2.Context) (*string, error) {
|
|
session.Values["authorizedAccounts"] = authorizedAccounts{}
|
|
session.Save(r, res)
|
|
http.Redirect(res, r, "overview", http.StatusFound)
|
|
return nil, nil
|
|
}
|
|
|
|
func checkLogin(r *http.Request, session *sessions.Session) (*authorizedAccount, error) {
|
|
vars := mux.Vars(r)
|
|
idx, err := strconv.ParseInt(vars["userIndex"], 10, 64)
|
|
if err != nil {
|
|
return nil, err // TODO: Handle in-app?
|
|
}
|
|
|
|
auth, ok := session.Values["authorizedAccounts"].(authorizedAccounts)
|
|
if !ok {
|
|
auth = authorizedAccounts{}
|
|
}
|
|
|
|
if len(auth)-1 < int(idx) {
|
|
return nil, nil
|
|
}
|
|
|
|
return &auth[idx], nil
|
|
}
|