added userLogout fixed #15, #10

Backend/endpoints/user-login.go

@@ -0,0 +1,87 @@
+package endpoints
+
+import (
+	"arbeitszeitmessung/helper"
+	"arbeitszeitmessung/models"
+	"arbeitszeitmessung/templates"
+	"context"
+	"log"
+	"net/http"
+	"strconv"
+	"time"
+
+	"github.com/alexedwards/scs/v2"
+)
+
+var Session *scs.SessionManager
+
+func CreateSessionManager(lifetime time.Duration) *scs.SessionManager {
+	Session = scs.New()
+	Session.Lifetime = lifetime
+	return Session
+}
+
+func LoginHandler(w http.ResponseWriter, r *http.Request) {
+	switch r.Method {
+	case http.MethodGet:
+		showLoginPage(w, r, false)
+		break
+	case http.MethodPost:
+		loginUser(w, r)
+		break
+	default:
+		http.Error(w, "Method not allowed!", http.StatusMethodNotAllowed)
+		break
+	}
+}
+
+func showLoginPage(w http.ResponseWriter, r *http.Request, failed bool) {
+	r = r.WithContext(context.WithValue(r.Context(), "session", Session))
+	if helper.GetEnv("GO_ENV", "production") == "debug" {
+		// http.Redirect(w, r, "/time", http.StatusSeeOther)
+		templates.LoginPage(failed).Render(r.Context(), w)
+	}
+	if Session.Exists(r.Context(), "user") {
+		http.Redirect(w, r, "/time", http.StatusSeeOther)
+	}
+	templates.LoginPage(failed).Render(r.Context(), w)
+}
+
+func loginUser(w http.ResponseWriter, r *http.Request) {
+	err := r.ParseForm()
+	if err != nil {
+		log.Println("Error parsing form!", err)
+		http.Error(w, "Internal error", http.StatusBadRequest)
+		return
+	}
+	_personal_nummer := r.FormValue("personal_nummer")
+	if _personal_nummer == "" {
+		log.Println("No personal_nummer provided!")
+		http.Error(w, "No personal_nummer provided", http.StatusBadRequest)
+		return
+	}
+	personal_nummer, err := strconv.Atoi(_personal_nummer)
+	if err != nil {
+		log.Println("Cannot parse personal nubmer!")
+		http.Error(w, "Cannot parse number", http.StatusBadRequest)
+		return
+	}
+
+	user, err := (*models.User).GetByPersonalNummer(nil, personal_nummer)
+	if err != nil {
+		log.Println("No user found under this personal number!")
+		http.Error(w, "No user found!", http.StatusNotFound)
+	}
+
+	password := r.FormValue("password")
+	if user.Login(password) {
+		log.Printf("New succesfull user login from %s %s!\n", user.Vorname, user.Name)
+		Session.Put(r.Context(), "user", user.PersonalNummer)
+		http.Redirect(w, r, "/time", http.StatusSeeOther) //with this browser always uses GET
+	} else {
+		showLoginPage(w, r, true)
+		return
+	}
+	showLoginPage(w, r, false)
+	return
+}