65 lines
1.3 KiB
Go
65 lines
1.3 KiB
Go
package server
|
|
|
|
import (
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
const sessionMaxAge = 7 * 86400
|
|
|
|
func (s *Server) requireAuth(next http.HandlerFunc) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
cookie, err := r.Cookie("ydropbox_session")
|
|
if err != nil {
|
|
http.Error(w, "Unauthorized", http.StatusUnauthorized)
|
|
return
|
|
}
|
|
|
|
s.mu.Lock()
|
|
createdAt, exists := s.sessions[cookie.Value]
|
|
if exists && time.Now().Unix()-createdAt > sessionMaxAge {
|
|
delete(s.sessions, cookie.Value)
|
|
exists = false
|
|
}
|
|
if exists {
|
|
s.sessions[cookie.Value] = time.Now().Unix()
|
|
}
|
|
s.mu.Unlock()
|
|
|
|
if !exists {
|
|
http.Error(w, "Unauthorized", http.StatusUnauthorized)
|
|
return
|
|
}
|
|
|
|
next(w, r)
|
|
}
|
|
}
|
|
|
|
func (s *Server) requireAuthPage(next http.HandlerFunc) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
cookie, err := r.Cookie("ydropbox_session")
|
|
if err != nil {
|
|
http.Redirect(w, r, "/login", http.StatusFound)
|
|
return
|
|
}
|
|
|
|
s.mu.Lock()
|
|
createdAt, exists := s.sessions[cookie.Value]
|
|
if exists && time.Now().Unix()-createdAt > sessionMaxAge {
|
|
delete(s.sessions, cookie.Value)
|
|
exists = false
|
|
}
|
|
if exists {
|
|
s.sessions[cookie.Value] = time.Now().Unix()
|
|
}
|
|
s.mu.Unlock()
|
|
|
|
if !exists {
|
|
http.Redirect(w, r, "/login", http.StatusFound)
|
|
return
|
|
}
|
|
|
|
next(w, r)
|
|
}
|
|
}
|