guildgate/session.go

package main

import (
	"log"
	"net/http"
	"strings"
)

func setSession(uname string, res http.ResponseWriter) {
	value := map[string]string{
		"name": uname,
	}
	if encoded, err := cookieHandler.Encode("session", value); err == nil {
		cookie := &http.Cookie{
			Name:  "session",
			Value: encoded,
			Path:  "/",
		}
		http.SetCookie(res, cookie)
	}
}

func getUserName(req *http.Request) (uname string) {
	if cookie, err := req.Cookie("session"); err == nil {
		cookieValue := make(map[string]string)
		if err = cookieHandler.Decode("session", cookie.Value, &cookieValue); err == nil {
			uname = cookieValue["name"]
		}
	}
	return uname
}

func clearSession(res http.ResponseWriter) {
	cookie := &http.Cookie{
		Name:   "session",
		Value:  "",
		Path:   "/",
		MaxAge: -1,
	}
	http.SetCookie(res, cookie)
}

func signup(res http.ResponseWriter, req *http.Request) {
	username := req.FormValue("username")
	password := req.FormValue("password")
	email := req.FormValue("email")
	secret := req.FormValue("secret")

	if Conf.Secret != "" && Conf.Secret != secret {
		//Checking it as a token
		_, err := validateToken(secret, false)
		if err != nil {
			log.Printf("Bad secret entered: %v\n", err)
			genericErrorPage(res, "User Creation Failure", "Unregistered", false, "Invalid Secret Token.", "to create account")

			return
		}
	}
	//insert into LDAP
	log.Printf("Attempting to create account for %v", username)
	err := createLDAPAccount(strings.ToLower(username), password, email)
	if err == nil {
		genericSuccessPage(res, "User Created", "Unregistered", false, "User created")
		return
	} else {
		genericErrorPage(res, "User Creation Failure", "Unregistered", false, err.Error(), "to create account")
		return
	}
}

func login(res http.ResponseWriter, req *http.Request) {
	username := strings.ToLower(req.FormValue("username"))
	password := req.FormValue("password")
	err := loginLDAPAccount(username, password)
	if err != nil {
		log.Printf("Error logging in user %v: %v\n", username, err)
		genericErrorPage(res, "Login Failure", "Unregistered", false, err.Error(), "to login")
		return
	} else {
		setSession(username, res)
		log.Printf("Succesful logging in user %v\n", username)
		http.Redirect(res, req, "/", 302)
		return
	}
}

func logout(res http.ResponseWriter, req *http.Request) {
	clearSession(res)
}