Fixed site ownership

handlers/ctx.go

@@ -1,9 +1,11 @@
 package handlers
 
 import (
+	"encoding/json"
 	"errors"
 	"github.com/gofiber/fiber/v2"
 	"lmika.dev/lmika/hugo-cms/models"
+	"log"
 )
 
 func GetUser(c *fiber.Ctx) models.User {
@@ -21,3 +23,35 @@ func GetSite(c *fiber.Ctx) models.Site {
 	}
 	return s
 }
+
+func UpdatePrefCookie(c *fiber.Ctx, update func(prefs *models.PrefCookie)) {
+	cookie := GetPrefCookie(c)
+	update(&cookie)
+	setPrefCookie(c, cookie)
+}
+
+func GetPrefCookie(c *fiber.Ctx) models.PrefCookie {
+	prefCookieValue := c.Cookies(models.PrefCookieName)
+	if prefCookieValue == "" {
+		return models.PrefCookie{}
+	}
+
+	var prefCookie models.PrefCookie
+	err := json.Unmarshal([]byte(prefCookieValue), &prefCookie)
+	if err != nil {
+		return models.PrefCookie{}
+	}
+
+	return prefCookie
+}
+
+func setPrefCookie(c *fiber.Ctx, prefCookie models.PrefCookie) {
+	if prefJson, err := json.Marshal(prefCookie); err == nil {
+		c.Cookie(&fiber.Cookie{
+			Name:  models.PrefCookieName,
+			Value: string(prefJson),
+		})
+	} else {
+		log.Printf("unable to save pref cookie: %v", err)
+	}
+}

handlers/index.go

@@ -0,0 +1,19 @@
+package handlers
+
+import (
+	"fmt"
+	"github.com/gofiber/fiber/v2"
+	"net/http"
+)
+
+type IndexHandler struct {
+}
+
+func (h IndexHandler) Index(c *fiber.Ctx) error {
+	prefs := GetPrefCookie(c)
+	if prefs.SiteID > 0 {
+		return c.Redirect(fmt.Sprintf("/sites/%v/posts", prefs.SiteID), http.StatusFound)
+	}
+
+	return c.Render("index", fiber.Map{}, "layouts/main")
+}

handlers/site.go

@@ -1,9 +1,13 @@
 package handlers
 
 import (
+	"errors"
 	"fmt"
 	"github.com/gofiber/fiber/v2"
+	"github.com/jackc/pgx/v5"
+	"lmika.dev/lmika/hugo-cms/models"
 	"lmika.dev/lmika/hugo-cms/services/sites"
+	"net/http"
 	"time"
 )
 
@@ -19,6 +23,10 @@ func (s *Site) Create(c *fiber.Ctx) error {
 		return err
 	}
 
+	UpdatePrefCookie(c, func(prefs *models.PrefCookie) {
+		prefs.SiteID = site.ID
+	})
+
 	return c.Redirect(fmt.Sprintf("/sites/%v/posts", site.ID))
 }
 
@@ -47,7 +55,7 @@ func (s *Site) Rebuild(c *fiber.Ctx) error {
 }
 
 func (s *Site) WithSite() fiber.Handler {
-	return func(c *fiber.Ctx) error {
+	return func(c *fiber.Ctx) (err error) {
 		id, err := c.ParamsInt("siteId")
 		if err != nil {
 			return err
@@ -58,7 +66,19 @@ func (s *Site) WithSite() fiber.Handler {
 			return err
 		}
 
+		user := GetUser(c)
+		if site.OwnerUserID != user.ID {
+			return c.Status(http.StatusForbidden).SendString("not permitted")
+		}
+
 		c.Locals("site", site)
+
+		if prodTarget, err := s.Site.GetProdTargetOfSite(c.UserContext(), int(site.ID)); err == nil {
+			c.Locals("prodTarget", prodTarget)
+		} else if !errors.Is(err, pgx.ErrNoRows) {
+			return err
+		}
+
 		return c.Next()
 	}
 }