mirror of
https://github.com/usememos/memos.git
synced 2024-12-27 05:12:13 +03:00
bdc9632b5b
* chore: rename user role to `host` * chore: related frontend changes * chore: fix migration file * chore: use tricky sql
119 lines
4.3 KiB
Go
119 lines
4.3 KiB
Go
package server
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
|
|
"github.com/usememos/memos/api"
|
|
"github.com/usememos/memos/common"
|
|
|
|
"github.com/labstack/echo/v4"
|
|
"golang.org/x/crypto/bcrypt"
|
|
)
|
|
|
|
func (s *Server) registerAuthRoutes(g *echo.Group) {
|
|
g.POST("/auth/signin", func(c echo.Context) error {
|
|
signin := &api.Signin{}
|
|
if err := json.NewDecoder(c.Request().Body).Decode(signin); err != nil {
|
|
return echo.NewHTTPError(http.StatusBadRequest, "Malformatted signin request").SetInternal(err)
|
|
}
|
|
|
|
userFind := &api.UserFind{
|
|
Email: &signin.Email,
|
|
}
|
|
user, err := s.Store.FindUser(userFind)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, fmt.Sprintf("Failed to find user by email %s", signin.Email)).SetInternal(err)
|
|
}
|
|
if user == nil {
|
|
return echo.NewHTTPError(http.StatusUnauthorized, fmt.Sprintf("User not found with email %s", signin.Email))
|
|
} else if user.RowStatus == api.Archived {
|
|
return echo.NewHTTPError(http.StatusForbidden, fmt.Sprintf("User has been archived with email %s", signin.Email))
|
|
}
|
|
|
|
// Compare the stored hashed password, with the hashed version of the password that was received.
|
|
if err := bcrypt.CompareHashAndPassword([]byte(user.PasswordHash), []byte(signin.Password)); err != nil {
|
|
// If the two passwords don't match, return a 401 status.
|
|
return echo.NewHTTPError(http.StatusUnauthorized, "Incorrect password").SetInternal(err)
|
|
}
|
|
|
|
if err = setUserSession(c, user); err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to set signin session").SetInternal(err)
|
|
}
|
|
|
|
c.Response().Header().Set(echo.HeaderContentType, echo.MIMEApplicationJSONCharsetUTF8)
|
|
if err := json.NewEncoder(c.Response().Writer).Encode(composeResponse(user)); err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to encode user response").SetInternal(err)
|
|
}
|
|
return nil
|
|
})
|
|
|
|
g.POST("/auth/logout", func(c echo.Context) error {
|
|
err := removeUserSession(c)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to set logout session").SetInternal(err)
|
|
}
|
|
|
|
c.Response().WriteHeader(http.StatusOK)
|
|
return nil
|
|
})
|
|
|
|
g.POST("/auth/signup", func(c echo.Context) error {
|
|
// Don't allow to signup by this api if site host existed.
|
|
hostUserType := api.Host
|
|
hostUserFind := api.UserFind{
|
|
Role: &hostUserType,
|
|
}
|
|
hostUser, err := s.Store.FindUser(&hostUserFind)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to find host user").SetInternal(err)
|
|
}
|
|
if hostUser != nil {
|
|
return echo.NewHTTPError(http.StatusUnauthorized, "Site Host existed, please contact the site host to signin account firstly.").SetInternal(err)
|
|
}
|
|
|
|
signup := &api.Signup{}
|
|
if err := json.NewDecoder(c.Request().Body).Decode(signup); err != nil {
|
|
return echo.NewHTTPError(http.StatusBadRequest, "Malformatted signup request").SetInternal(err)
|
|
}
|
|
|
|
// Validate signup form.
|
|
// We can do stricter checks later.
|
|
if len(signup.Email) < 6 {
|
|
return echo.NewHTTPError(http.StatusBadRequest, "Email is too short, minimum length is 6.")
|
|
}
|
|
if len(signup.Password) < 6 {
|
|
return echo.NewHTTPError(http.StatusBadRequest, "Password is too short, minimum length is 6.")
|
|
}
|
|
|
|
passwordHash, err := bcrypt.GenerateFromPassword([]byte(signup.Password), bcrypt.DefaultCost)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to generate password hash").SetInternal(err)
|
|
}
|
|
|
|
userCreate := &api.UserCreate{
|
|
Email: signup.Email,
|
|
Role: api.Role(signup.Role),
|
|
Name: signup.Name,
|
|
PasswordHash: string(passwordHash),
|
|
OpenID: common.GenUUID(),
|
|
}
|
|
user, err := s.Store.CreateUser(userCreate)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to create user").SetInternal(err)
|
|
}
|
|
|
|
err = setUserSession(c, user)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to set signup session").SetInternal(err)
|
|
}
|
|
|
|
c.Response().Header().Set(echo.HeaderContentType, echo.MIMEApplicationJSONCharsetUTF8)
|
|
if err := json.NewEncoder(c.Response().Writer).Encode(composeResponse(user)); err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Failed to encode created user response").SetInternal(err)
|
|
}
|
|
return nil
|
|
})
|
|
}
|