require login middleware

Author: avoidik

cmd/web/middleware.go

@@ -22,3 +22,18 @@ func SecureHeaders(next http.Handler) http.Handler {
 		next.ServeHTTP(w, r)
 	})
 }
+
+func (app *App) RequireLogin(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		loggedIn, err := app.LoggedIn(r)
+		if err != nil {
+			app.ServerError(w, err)
+			return
+		}
+		if !loggedIn {
+			http.Redirect(w, r, "/user/login", http.StatusFound)
+			return
+		}
+		next.ServeHTTP(w, r)
+	})
+}

cmd/web/routes.go

@@ -12,22 +12,20 @@ func (app *App) Routes() http.Handler {
 
 	mux.Get("/", http.HandlerFunc(app.Home))
 
-	mux.Get("/snippet/new", http.HandlerFunc(app.NewSnippet))
-	mux.Post("/snippet/new", http.HandlerFunc(app.CreateSnippet))
+	mux.Get("/snippet/new", alice.New(app.RequireLogin).Then(http.HandlerFunc(app.NewSnippet)))
+	mux.Post("/snippet/new", alice.New(app.RequireLogin).Then(http.HandlerFunc(app.CreateSnippet)))
 	mux.Get("/snippet/:id", http.HandlerFunc(app.ShowSnippet))
 
 	mux.Get("/user/signup", http.HandlerFunc(app.SignupUser))
 	mux.Post("/user/signup", http.HandlerFunc(app.CreateUser))
 	mux.Get("/user/login", http.HandlerFunc(app.LoginUser))
 	mux.Post("/user/login", http.HandlerFunc(app.VerifyUser))
-	mux.Post("/user/logout", http.HandlerFunc(app.LogoutUser))
+	mux.Post("/user/logout", alice.New(app.RequireLogin).Then(http.HandlerFunc(app.LogoutUser)))
 
 	fileServer := http.FileServer(http.Dir(app.staticDir))
 	mux.Get("/static/", http.StripPrefix("/static", DisableIndex(fileServer)))
 
 	mux.Get("/version", http.HandlerFunc(app.VersionInfo))
 
-	chain := alice.New(LogRequest, SecureHeaders).Then(mux)
-
-	return chain
+	return alice.New(LogRequest, SecureHeaders).Then(mux)
 }