sashakoshka/go-gemini
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use WithCertificate helper in auth example

Browse Source
This commit is contained in:
adnano 2020-09-28 01:14:29 -04:00
parent f09b859370
commit aec4a5d7c9
1 changed files with 15 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
examples/auth/auth.go
View File

@ -73,24 +73,22 @@ func welcome(rw *gmi.ResponseWriter, req *gmi.Request) {
} }
func login(rw *gmi.ResponseWriter, req *gmi.Request) { func login(rw *gmi.ResponseWriter, req *gmi.Request) {
if len(req.TLS.PeerCertificates) > 0 { gmi.WithCertificate(rw, req, func(cert *x509.Certificate) {
if username := req.URL.RawQuery; username == "" { if username := req.URL.RawQuery; username == "" {
gmi.Input(rw, req, "Username") gmi.Input(rw, req, "Username")
} else { } else {
fingerprint := gmi.Fingerprint(req.TLS.PeerCertificates[0]) fingerprint := gmi.Fingerprint(cert)
sessions[fingerprint] = &session{ sessions[fingerprint] = &session{
username: username, username: username,
} }
gmi.Redirect(rw, req, "/login/password") gmi.Redirect(rw, req, "/login/password")
} }
} else { })
gmi.CertificateRequired(rw, req)
}
} }
func loginPassword(rw *gmi.ResponseWriter, req *gmi.Request) { func loginPassword(rw *gmi.ResponseWriter, req *gmi.Request) {
if len(req.TLS.PeerCertificates) > 0 { gmi.WithCertificate(rw, req, func(cert *x509.Certificate) {
session, ok := getSession(req.TLS.PeerCertificates[0]) session, ok := getSession(cert)
if !ok { if !ok {
gmi.CertificateNotAuthorized(rw, req) gmi.CertificateNotAuthorized(rw, req)
return return
@ -107,22 +105,20 @@ func loginPassword(rw *gmi.ResponseWriter, req *gmi.Request) {
gmi.SensitiveInput(rw, req, "Wrong password. Try again") gmi.SensitiveInput(rw, req, "Wrong password. Try again")
} }
} }
} else { })
gmi.CertificateRequired(rw, req)
}
} }
func logout(rw *gmi.ResponseWriter, req *gmi.Request) { func logout(rw *gmi.ResponseWriter, req *gmi.Request) {
if len(req.TLS.PeerCertificates) > 0 { gmi.WithCertificate(rw, req, func(cert *x509.Certificate) {
fingerprint := gmi.Fingerprint(req.TLS.PeerCertificates[0]) fingerprint := gmi.Fingerprint(cert)
delete(sessions, fingerprint) delete(sessions, fingerprint)
} })
rw.Write([]byte("Successfully logged out.\n")) rw.Write([]byte("Successfully logged out.\n"))
} }
func profile(rw *gmi.ResponseWriter, req *gmi.Request) { func profile(rw *gmi.ResponseWriter, req *gmi.Request) {
if len(req.TLS.PeerCertificates) > 0 { gmi.WithCertificate(rw, req, func(cert *x509.Certificate) {
session, ok := getSession(req.TLS.PeerCertificates[0]) session, ok := getSession(cert)
if !ok { if !ok {
gmi.CertificateNotAuthorized(rw, req) gmi.CertificateNotAuthorized(rw, req)
return return
@ -130,14 +126,12 @@ func profile(rw *gmi.ResponseWriter, req *gmi.Request) {
user := logins[session.username] user := logins[session.username]
profile := fmt.Sprintf("Username: %s\nAdmin: %t\n=> /logout Logout", session.username, user.admin) profile := fmt.Sprintf("Username: %s\nAdmin: %t\n=> /logout Logout", session.username, user.admin)
rw.Write([]byte(profile)) rw.Write([]byte(profile))
} else { })
gmi.CertificateRequired(rw, req)
}
} }
func admin(rw *gmi.ResponseWriter, req *gmi.Request) { func admin(rw *gmi.ResponseWriter, req *gmi.Request) {
if len(req.TLS.PeerCertificates) > 0 { gmi.WithCertificate(rw, req, func(cert *x509.Certificate) {
session, ok := getSession(req.TLS.PeerCertificates[0]) session, ok := getSession(cert)
if !ok { if !ok {
gmi.CertificateNotAuthorized(rw, req) gmi.CertificateNotAuthorized(rw, req)
return return
@ -148,7 +142,5 @@ func admin(rw *gmi.ResponseWriter, req *gmi.Request) {
return return
} }
rw.Write([]byte("Welcome to the admin portal.\n")) rw.Write([]byte("Welcome to the admin portal.\n"))
} else { })
gmi.CertificateRequired(rw, req)
}
} }