114 lines
3.0 KiB
Go
114 lines
3.0 KiB
Go
package router
|
|
|
|
import (
|
|
"github.com/gofiber/fiber/v2"
|
|
"github.com/johannesbuehl/golunteer/backend/pkg/db"
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
// handle welcome-messages from clients
|
|
func handleWelcome(c *fiber.Ctx) error {
|
|
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
|
|
|
response := responseMessage{}
|
|
response.Data = UserChecked{
|
|
Admin: false,
|
|
}
|
|
|
|
args := HandlerArgs{C: c}
|
|
|
|
if loggedIn, err := args.checkUser(); err != nil {
|
|
response.Status = fiber.StatusInternalServerError
|
|
|
|
logger.Warn().Msgf("can't check user: %v", err)
|
|
} else if !loggedIn {
|
|
response.Status = fiber.StatusUnauthorized
|
|
|
|
logger.Debug().Msgf("user not authorized")
|
|
} else {
|
|
response.Data = UserChecked{
|
|
UserName: args.User.UserName,
|
|
Admin: args.User.Admin,
|
|
}
|
|
|
|
logger.Debug().Msgf("welcomed user %q", args.User.UserName)
|
|
}
|
|
|
|
return response.send(c)
|
|
}
|
|
|
|
const messageWrongLogin = "Unkown user or wrong password"
|
|
|
|
func handleLogin(c *fiber.Ctx) error {
|
|
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
|
|
|
args := HandlerArgs{C: c}
|
|
|
|
// extract username and password from the request
|
|
requestBody := struct {
|
|
Username string `json:"userName" validate:"required"`
|
|
Password string `json:"password" validate:"required"`
|
|
}{}
|
|
|
|
var response responseMessage
|
|
|
|
if err := args.C.BodyParser(&requestBody); err != nil {
|
|
logger.Debug().Msgf("can't parse login-body: %v", err)
|
|
|
|
response.Status = fiber.StatusBadRequest
|
|
|
|
// validate the body
|
|
} else if err := validate.Struct(requestBody); err != nil {
|
|
logger.Warn().Msgf("can't parse login-body: %v", err)
|
|
} else {
|
|
// query the database for the user
|
|
var result userDB
|
|
if err := db.DB.QueryRowx("SELECT password, admin, tokenID FROM USERS WHERE name = ?", requestBody.Username).StructScan(&result); err != nil {
|
|
response.Status = fiber.StatusForbidden
|
|
response.Message = messageWrongLogin
|
|
|
|
logger.Info().Msgf("can't get user with name = %q from database", requestBody.Username)
|
|
} else {
|
|
// hash the password
|
|
if bcrypt.CompareHashAndPassword(result.Password, []byte(requestBody.Password)) != nil {
|
|
response.Status = fiber.StatusForbidden
|
|
|
|
logger.Info().Msgf("login denied: wrong password for user with name = %q", requestBody.Username)
|
|
} else {
|
|
// password is correct -> generate the JWT
|
|
if jwt, err := config.SignJWT(JWTPayload{
|
|
UserName: requestBody.Username,
|
|
TokenID: result.TokenID,
|
|
}); err != nil {
|
|
response.Status = fiber.StatusInternalServerError
|
|
logger.Error().Msgf("can't create JWT: %v", err)
|
|
} else {
|
|
args.setSessionCookie(&jwt)
|
|
|
|
response.Data = UserChecked{
|
|
UserName: requestBody.Username,
|
|
Admin: true,
|
|
}
|
|
|
|
logger.Debug().Msgf("user %q logged in", requestBody.Username)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return response.send(args.C)
|
|
}
|
|
|
|
// handles logout-requests
|
|
func handleLogout(c *fiber.Ctx) error {
|
|
logger.Debug().Msgf("HTTP %s request: %q", c.Method(), c.OriginalURL())
|
|
|
|
args := HandlerArgs{
|
|
C: c,
|
|
}
|
|
|
|
args.removeSessionCookie()
|
|
|
|
return responseMessage{}.send(c)
|
|
}
|