package endpoints import ( "arbeitszeitmessung/models" "arbeitszeitmessung/templates" "log" "net/http" "strconv" "time" "github.com/alexedwards/scs/v2" ) var Session *scs.SessionManager func CreateSessionManager(lifetime time.Duration) *scs.SessionManager { Session = scs.New() Session.Lifetime = lifetime return Session } func LoginHandler(w http.ResponseWriter, r *http.Request){ switch r.Method{ case http.MethodGet: showForm(w, r) break case http.MethodPost: loginUser(w, r) break default: showForm(w, r) break } } func showForm(w http.ResponseWriter, r *http.Request){ templates.LoginForm().Render(r.Context(), w) } func loginUser(w http.ResponseWriter, r *http.Request){ err := r.ParseForm() if err != nil { log.Println("Error parsing form!", err) http.Error(w, "Internal error", http.StatusBadRequest) return } _personal_nummer := r.FormValue("personal_nummer") if(_personal_nummer == ""){ log.Println("No personal_nummer provided!") http.Error(w, "No personal_nummer provided", http.StatusBadRequest) return } personal_nummer, err := strconv.Atoi(_personal_nummer) if(err != nil){ log.Println("Cannot parse personal nubmer!") http.Error(w, "Cannot parse number", http.StatusBadRequest) return } user, err := (*models.User).GetByPersonalNummer(nil, personal_nummer) if(err != nil){ log.Println("No user found under this personal number!") http.Error(w, "No user found!", http.StatusNotFound) } password := r.FormValue("password") if(user.Login(password)){ log.Printf("New succesfull user login from %s %s!\n", user.Vorname, user.Name) Session.Put(r.Context(), "user", user.PersonalNummer) http.Redirect(w, r, "/time", http.StatusSeeOther) //with this browser always uses GET } showForm(w, r) }