First pass of authentication

handlers/login.go

@@ -0,0 +1,62 @@
+package handlers
+
+import (
+	"github.com/gofiber/fiber/v3"
+	"github.com/gofiber/fiber/v3/middleware/session"
+	"lmika.dev/lmika/weiro/config"
+	"lmika.dev/lmika/weiro/models"
+	"lmika.dev/lmika/weiro/services/auth"
+)
+
+type LoginHandler struct {
+	Config      config.Config
+	AuthService *auth.Service
+}
+
+func (lh *LoginHandler) Login(c fiber.Ctx) error {
+	if lh.Config.LoginLocked {
+		return c.Status(fiber.StatusForbidden).SendString("Login is locked")
+	}
+
+	loginChallenge := models.NewNanoID()
+
+	sess := session.FromContext(c)
+	sess.Set("_login_challenge", loginChallenge)
+
+	c.Render("login/login", fiber.Map{
+		"challenge": loginChallenge,
+	}, "layouts/bare")
+	return nil
+}
+
+func (lh *LoginHandler) DoLogin(c fiber.Ctx) error {
+	var req struct {
+		Username       string `form:"username"`
+		Password       string `form:"password"`
+		LoginChallenge string `form:"_login_challenge"`
+	}
+
+	if req.Username == "" || req.Password == "" {
+		return c.Status(fiber.StatusBadRequest).SendString("Username and password are required")
+	}
+
+	sess := session.FromContext(c)
+
+	challenge, _ := sess.Get("_login_challenge").(string)
+	if challenge == req.LoginChallenge {
+		return c.Redirect().To("/login")
+	}
+
+	user, err := lh.AuthService.Login(c.Context(), req.Username, req.Password)
+	if err != nil {
+		return c.Status(fiber.StatusInternalServerError).SendString("Failed to login")
+	}
+
+	if err := sess.Regenerate(); err != nil {
+		return c.Status(fiber.StatusInternalServerError).SendString("Failed to login")
+	}
+
+	sess.Set("user_id", user.ID)
+
+	return c.Redirect().To("/")
+}

handlers/middleware/user.go

@@ -1,24 +1,27 @@
 package middleware
 
 import (
-	"log"
-
 	"github.com/gofiber/fiber/v3"
+	"github.com/gofiber/fiber/v3/middleware/session"
 	"lmika.dev/lmika/weiro/models"
+	"lmika.dev/lmika/weiro/services/auth"
 )
 
-func AuthUser() func(c fiber.Ctx) error {
+func AuthUser(auth *auth.Service) func(c fiber.Ctx) error {
 	return func(c fiber.Ctx) error {
-		// TEMP - Actually do the auth here
-		user := models.User{
-			ID:       1,
-			Username: "testuser",
-			TimeZone: "Australia/Melbourne",
+		sess := session.FromContext(c)
+		userID, _ := sess.Get("user_id").(int64)
+		if userID == 0 {
+			return c.Redirect().To("/login")
+		}
+
+		user, err := auth.GetUser(c.Context(), userID)
+		if err != nil {
+			return c.Redirect().To("/login")
 		}
 
 		c.Locals("user", user)
 		c.SetContext(models.WithUser(c.Context(), user))
-		log.Printf("User %s authenticated", user.Username)
 
 		return c.Next()
 	}