// Handles user login. If user is logged in, redirects to '/'.
func LoginHandler(w http.ResponseWriter, r *http.Request) {
if auth.LoggedIn(w, r, s) {
http.Redirect(w, r, "/auth-check", 302)
return
}
if r.Method == "GET" {
t, err := template.ParseFiles("views/login.html")
if err != nil {
log.Println(err)
return
}
t.Execute(w, nil)
} else {
// Get values from html form
user := r.FormValue("user")
pass := r.FormValue("password")
// Attempt to validate user, if incorrect info, send user back to login page
if auth.ValidateLogin(user, pass, db) {
cookie, err := createCookie()
if err != nil {
log.Println(err)
http.Redirect(w, r, "/login", 302)
return
}
http.SetCookie(w, cookie)
http.Redirect(w, r, "/auth-check", 302)
} else {
http.Redirect(w, r, "/login", 302)
}
}
}
// Handles user logout and redirects to '/login'
func LogoutHandler(w http.ResponseWriter, r *http.Request) {
if !auth.LoggedIn(w, r, s) {
http.Redirect(w, r, "/login", 302)
return
}
cookie := deleteCookie()
http.SetCookie(w, cookie)
http.Redirect(w, r, "/login", 302)
return
}
// Test of user authentication. Redirects user to login page if not logged in.
func AuthCheck(w http.ResponseWriter, r *http.Request) {
if !auth.LoggedIn(w, r, s) {
http.Redirect(w, r, "/login", 302)
return
}
t, err := template.ParseFiles("views/authCheck.html")
if err != nil {
log.Println(err)
return
}
t.Execute(w, nil)
}
// Allow users to register
func RegistrationHandler(w http.ResponseWriter, r *http.Request) {
if auth.LoggedIn(w, r, s) {
http.Redirect(w, r, "/auth-check", 302)
return
}
if r.Method == "GET" {
t, err := template.ParseFiles("views/registration.html")
if err != nil {
log.Println(err)
return
}
t.Execute(w, nil)
} else {
// Get values from html form
user := r.FormValue("user")
password := r.FormValue("password")
err := db.Update(func(tx *bolt.Tx) error {
bucket, err := tx.CreateBucketIfNotExists([]byte("users"))
if err != nil {
return err
}
passwordCrypt, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
if err != nil {
return err
}
err = bucket.Put([]byte(user), passwordCrypt)
if err != nil {
return err
}
cookie, err := createCookie()
if err != nil {
return err
}
http.SetCookie(w, cookie)
http.Redirect(w, r, "auth-check", 302)
return nil
})
if err != nil {
log.Println(err)
return
}
}
http.Redirect(w, r, "/register", 302)
}