arimelody.me/admin/http.go

package admin

import (
	"context"
	"fmt"
	"html/template"
	"net/http"
	"os"
	"path/filepath"
	"strings"
	"time"

	"arimelody.me/arimelody.me/discord"
	"arimelody.me/arimelody.me/global"
)

func Handler() http.Handler {
    mux := http.NewServeMux()

    mux.Handle("/", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        w.WriteHeader(http.StatusOK)
        w.Write([]byte("hello /admin!"))
    }))
    mux.Handle("/callback", global.HTTPLog(OAuthCallbackHandler()))
    mux.Handle("/login", global.HTTPLog(LoginHandler()))
    mux.Handle("/verify", global.HTTPLog(MustAuthorise(VerifyHandler())))
    mux.Handle("/logout", global.HTTPLog(MustAuthorise(LogoutHandler())))
    mux.Handle("/static", global.HTTPLog(MustAuthorise(staticHandler())))

    return mux
}

func MustAuthorise(next http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        auth := r.Header.Get("Authorization")
        if strings.HasPrefix(auth, "Bearer ") {
            auth = auth[7:]
        } else {
            cookie, err := r.Cookie("token")
            if err != nil {
                http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
                return
            }
            auth = cookie.Value
        }

        var session *Session
        for _, s := range sessions {
            if s.Expires < time.Now().Unix() {
                // expired session. remove it from the list!
                new_sessions := []*Session{}
                for _, ns := range sessions {
                    if ns.Token == s.Token {
                        continue
                    }
                    new_sessions = append(new_sessions, ns)
                }
                continue
            }

            if s.Token == auth {
                session = s
                break
            }
        } 

        if session == nil {
            http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
            return
        }

        ctx := context.WithValue(r.Context(), "role", "admin")
        next.ServeHTTP(w, r.WithContext(ctx))
    })
}

func LoginHandler() http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        if ADMIN_ID_DISCORD == "" {
            http.Error(w, http.StatusText(http.StatusServiceUnavailable), http.StatusServiceUnavailable)
            return
        }

        code := r.URL.Query().Get("code")

        if code == "" {
            http.Redirect(w, r, discord.REDIRECT_URI, http.StatusTemporaryRedirect)
            return
        }

        auth_token, err := discord.GetOAuthTokenFromCode(code)
        if err != nil {
            fmt.Printf("Failed to retrieve discord access token: %s\n", err)
            http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
            return
        }

        discord_user, err := discord.GetDiscordUserFromAuth(auth_token)
        if err != nil {
            fmt.Printf("Failed to retrieve discord user information: %s\n", err)
            http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
            return
        }

        if discord_user.Id != ADMIN_ID_DISCORD {
            // TODO: unauthorized user; revoke the token
            http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
            return
        }

        // login success!
        session := createSession(discord_user.Username)
        sessions = append(sessions, &session)

        cookie := http.Cookie{}
        cookie.Name = "token"
        cookie.Value = session.Token
        cookie.Expires = time.Now().Add(24 * time.Hour)
        // cookie.Secure = true
        cookie.HttpOnly = true
        cookie.Path = "/"
        http.SetCookie(w, &cookie)

        w.WriteHeader(http.StatusOK)
        w.Write([]byte(session.Token))
    })
}

func LogoutHandler() http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        token := r.Context().Value("token").(string)

        if token == "" {
            http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
            return
        }

        // remove this session from the list
        sessions = func (token string) []*Session {
            new_sessions := []*Session{}
            for _, session := range sessions {
                new_sessions = append(new_sessions, session)
            }
            return new_sessions
        }(token)

        w.WriteHeader(http.StatusOK)
        w.Write([]byte("OK"))
    })
}

func OAuthCallbackHandler() http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
    })
}

func VerifyHandler() http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        // this is an authorised endpoint, so you *must* supply a valid token
        // before accessing this route.
        w.WriteHeader(http.StatusOK)
        w.Write([]byte("OK"))
    })
}

func ServeTemplate(page string, data any) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		lp_layout := filepath.Join("views", "layout.html")
		lp_header := filepath.Join("views", "header.html")
		lp_footer := filepath.Join("views", "footer.html")
		lp_prideflag := filepath.Join("views", "prideflag.html")
		fp := filepath.Join("views", filepath.Clean(page))

		info, err := os.Stat(fp)
		if err != nil {
			if os.IsNotExist(err) {
				http.NotFound(w, r)
				return
			}
		}

		if info.IsDir() {
			http.NotFound(w, r)
			return
		}

		template, err := template.ParseFiles(lp_layout, lp_header, lp_footer, lp_prideflag, fp)
		if err != nil {
			fmt.Printf("Error parsing template files: %s\n", err)
			http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
			return
		}

		err = template.ExecuteTemplate(w, "layout.html", data)
		if err != nil {
			fmt.Printf("Error executing template: %s\n", err)
			http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
			return
		}
	})
}

func staticHandler() http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        info, err := os.Stat(filepath.Join("admin", "static", filepath.Clean(r.URL.Path)))
        // does the file exist?
        if err != nil {
            if os.IsNotExist(err) {
                http.NotFound(w, r)
                return
            }
        }

        // is thjs a directory? (forbidden)
        if info.IsDir() {
            http.NotFound(w, r)
            return
        }

        http.FileServer(http.Dir(filepath.Join("admin", "static"))).ServeHTTP(w, r)
    })
}