Files
arbeitszeitmessung/Backend/endpoints/user.go
2025-02-21 20:44:35 +01:00

75 lines
1.8 KiB
Go

package endpoints
import (
"arbeitszeitmessung/models"
"arbeitszeitmessung/templates"
"log"
"net/http"
"strconv"
"time"
"github.com/alexedwards/scs/v2"
)
var Session *scs.SessionManager
func CreateSessionManager(lifetime time.Duration) *scs.SessionManager {
Session = scs.New()
Session.Lifetime = lifetime
return Session
}
func LoginHandler(w http.ResponseWriter, r *http.Request){
switch r.Method{
case http.MethodGet: showForm(w, r, false)
break
case http.MethodPost: loginUser(w, r)
break
default:
showForm(w, r, false)
break
}
}
func showForm(w http.ResponseWriter, r *http.Request, failed bool){
templates.LoginForm(failed).Render(r.Context(), w)
}
func loginUser(w http.ResponseWriter, r *http.Request){
err := r.ParseForm()
if err != nil {
log.Println("Error parsing form!", err)
http.Error(w, "Internal error", http.StatusBadRequest)
return
}
_personal_nummer := r.FormValue("personal_nummer")
if(_personal_nummer == ""){
log.Println("No personal_nummer provided!")
http.Error(w, "No personal_nummer provided", http.StatusBadRequest)
return
}
personal_nummer, err := strconv.Atoi(_personal_nummer)
if(err != nil){
log.Println("Cannot parse personal nubmer!")
http.Error(w, "Cannot parse number", http.StatusBadRequest)
return
}
user, err := (*models.User).GetByPersonalNummer(nil, personal_nummer)
if(err != nil){
log.Println("No user found under this personal number!")
http.Error(w, "No user found!", http.StatusNotFound)
}
password := r.FormValue("password")
if(user.Login(password)){
log.Printf("New succesfull user login from %s %s!\n", user.Vorname, user.Name)
Session.Put(r.Context(), "user", user.PersonalNummer)
http.Redirect(w, r, "/time", http.StatusSeeOther) //with this browser always uses GET
}else{
showForm(w, r, true)
}
showForm(w, r, false)
}