19790af673
All checks were successful
Build Docker Image / Explore-Gitea-Actions (push) Successful in 47s
147 lines
3.8 KiB
Go
147 lines
3.8 KiB
Go
package service
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"database/sql"
|
|
"encoding/base64"
|
|
"log"
|
|
"net/http"
|
|
"net/mail"
|
|
"strings"
|
|
|
|
"me-fit/template"
|
|
"me-fit/template/auth"
|
|
|
|
"github.com/google/uuid"
|
|
"golang.org/x/crypto/argon2"
|
|
)
|
|
|
|
func SignInPage(w http.ResponseWriter, r *http.Request) {
|
|
signIn := auth.SignInOrUp(true)
|
|
template.Layout(signIn).Render(r.Context(), w)
|
|
}
|
|
|
|
func SignUpPage(w http.ResponseWriter, r *http.Request) {
|
|
signIn := auth.SignInOrUp(false)
|
|
template.Layout(signIn).Render(r.Context(), w)
|
|
}
|
|
|
|
func UserInfoComp(db *sql.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
//TODO
|
|
}
|
|
}
|
|
|
|
func SignUp(db *sql.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
var email = r.FormValue("email")
|
|
var password = r.FormValue("password")
|
|
|
|
_, err := mail.ParseAddress(email)
|
|
if err != nil {
|
|
http.Error(w, "Invalid email", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
if len(password) < 8 ||
|
|
!strings.ContainsAny(password, "0123456789") ||
|
|
!strings.ContainsAny(password, "ABCDEFGHIJKLMNOPQRSTUVWXYZ") ||
|
|
!strings.ContainsAny(password, "abcdefghijklmnopqrstuvwxyz") ||
|
|
!strings.ContainsAny(password, "!@#$%^&*()_+-=[]{}\\|;:'\",.<>/?") {
|
|
http.Error(w, "Password needs to be 8 characters long, contain at least one number, one special, one uppercase and one lowercase character", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
user_uuid, err := uuid.NewRandom()
|
|
if err != nil {
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
log.Printf("Could not generate UUID: %v", err)
|
|
return
|
|
}
|
|
|
|
salt := make([]byte, 16)
|
|
rand.Read(salt)
|
|
|
|
hash := getHashPassword(password, salt)
|
|
|
|
_, err = db.Exec("INSERT INTO user (user_uuid, email, email_verified, is_admin, password, salt, created_at) VALUES (?, ?, FALSE, FALSE, ?, ?, datetime())", user_uuid, email, hash, salt)
|
|
if err != nil {
|
|
if strings.Contains(err.Error(), "email") {
|
|
http.Error(w, "Bad Request", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
log.Printf("Could not insert user: %v", err)
|
|
return
|
|
}
|
|
|
|
result := tryCreateSessionAndSetCookie(r, w, db, user_uuid)
|
|
if !result {
|
|
return
|
|
}
|
|
|
|
w.WriteHeader(http.StatusOK)
|
|
}
|
|
}
|
|
|
|
// var (
|
|
// metricsAuthSignUp = promauto.NewCounterVec(
|
|
// prometheus.CounterOpts{
|
|
// Name: "mefit_api_auth_signup_total",
|
|
// Help: "The total number of auth signup api requests processed",
|
|
// },
|
|
// []string{"result"},
|
|
// )
|
|
//
|
|
// metricsError = promauto.NewCounterVec(
|
|
// prometheus.CounterOpts{
|
|
// Name: "mefit_api_error_total",
|
|
// Help: "The total number of errors",
|
|
// },
|
|
// []string{"result"},
|
|
// )
|
|
//
|
|
// // metricsAuthSignIn = promauto.NewCounterVec(
|
|
// // prometheus.CounterOpts{
|
|
// // Name: "mefit_api_auth_signin_total",
|
|
// // },
|
|
// // []string{"result"},
|
|
// // )
|
|
// )
|
|
|
|
func tryCreateSessionAndSetCookie(r *http.Request, w http.ResponseWriter, db *sql.DB, user_uuid uuid.UUID) bool {
|
|
var session_id_bytes []byte = make([]byte, 32)
|
|
_, err := rand.Reader.Read(session_id_bytes)
|
|
if err != nil {
|
|
log.Printf("Could not generate session ID: %v", err)
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
return false
|
|
}
|
|
session_id := base64.StdEncoding.EncodeToString(session_id_bytes)
|
|
|
|
_, err = db.Exec("INSERT INTO session (session_id, user_uuid, created_at) VALUES (?, ?, datetime())", session_id, user_uuid)
|
|
if err != nil {
|
|
log.Printf("Could not insert session: %v", err)
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
return false
|
|
}
|
|
|
|
cookie := http.Cookie{
|
|
Name: "id",
|
|
Value: session_id,
|
|
MaxAge: 60 * 60 * 8, // 8 hours
|
|
Secure: true,
|
|
HttpOnly: true,
|
|
SameSite: http.SameSiteStrictMode,
|
|
Path: "/",
|
|
}
|
|
http.SetCookie(w, &cookie)
|
|
|
|
return true
|
|
}
|
|
|
|
func getHashPassword(password string, salt []byte) []byte {
|
|
return argon2.IDKey([]byte(password), salt, 1, 64*1024, 1, 16)
|
|
}
|