Commit Graph

39 Commits

Author SHA1 Message Date
surtur 882b7dfd28
go: add more logs on unauthorised access
All checks were successful
continuous-integration/drone/push Build is passing
* log details about unauthorised access
* return semantically correct 403 (instead of 401) on unauthorised access
* allow read-only admin access to "hibp breach details" endpoint
2023-09-10 14:12:13 +02:00
surtur 73915fcd98
fix(go): resolve signin/logout issues for all time
All checks were successful
continuous-integration/drone/push Build is passing
affects:
* app/settings
* app/server
* handlers
    * signin
    * signup
    * logout
    * home
    * middleware
2023-09-08 17:22:20 +02:00
surtur 6b45213649
go: add user onboarding, HIBP search functionality
All checks were successful
continuous-integration/drone/push Build is passing
* add user onboarding workflow
* fix user editing (no edits of passwords of regular users after
  onboarding)
* refresh HIBP breach cache in DB on app start-up
* display HIBP breach details
* fix request scheduling to prevent panics (this still needs some love..)
* fix middleware auth
* add TODOs
* update head.tmpl
* reword some error messages
2023-08-24 18:43:24 +02:00
surtur f0bda26e8c
handlers: add helper newPage func w/ pre-filling
All checks were successful
continuous-integration/drone/push Build is passing
2023-08-15 18:33:48 +02:00
leo afc97407f6
healthz: use proper JSON
All checks were successful
continuous-integration/drone/push Build is passing
2023-06-04 11:32:57 +02:00
leo 3a2f85f683
feat: add license headers (+spdx id)
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-20 20:15:57 +02:00
leo be1709794a
fix(session panic): check if nil before use
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-16 13:49:02 +02:00
leo 31ab083f8a
handlers: add health-check endpoints
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-13 22:33:38 +02:00
leo b77c2fe941
handlers: add func addHeaders
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-11 23:50:40 +02:00
leo 468e20da0a
handlers/index: refactor to use c.Render
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-11 05:01:19 +02:00
leo 122ea638c9
go: refactor template rendering
All checks were successful
continuous-integration/drone/push Build is passing
* create pkg 'modules/template'
* move template rendering code from 'handlers' to 'modules/template'
* update call sites
* walk the 'templates' dir to discover nested hierarchies
* solidify LiveMode handling (vs embedded assets)
* break out funcMap to it's own file
* general clean-up
2023-05-11 04:32:39 +02:00
leo 46cc1d663f
go(handlers): split get,set funcMap funcs
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-10 19:17:17 +02:00
leo 2215383c5d
go: refactor handlers
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-10 19:09:41 +02:00
leo a879704535
go: partially rework how slogging works
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-09 17:35:00 +02:00
leo 0490786f11
refactor(handlers): break out signin funcs
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-07 00:19:10 +02:00
leo 9dbc475145
go: implement the Echo renderer for templates
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-06 21:50:35 +02:00
leo c4f8cf87f5
go: redirect signed users from / to /home
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-06 00:09:13 +02:00
leo eafc9c1e92
go,tmpl: conditionally show content to users
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-06 00:03:41 +02:00
leo a2c17693c6
go: save,verify a bcrypt hash of the passwd
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-03 06:30:12 +02:00
leo 864e2ec815
handlers.go: change msg log level
All checks were successful
continuous-integration/drone/push Build is passing
2023-05-03 06:03:38 +02:00
leo c4d0cb209b
go: add settings struct
All checks were successful
continuous-integration/drone/push Build is passing
* let the settings struct be the single source of truth
* rm app fields that are covered by settings
* pass around a pointer to settings instead of config
* consolidate config+flags into settings on start-up
* update tests
* rm empty settings.go file

fixes #4
2023-05-03 02:18:29 +02:00
leo 593454d616
go: add user email handling + improve sessions
All checks were successful
continuous-integration/drone/push Build is passing
* add Email field to User entity (+codegen)
* switch to Echo contrib sessions backed by Gorilla sessions
* use SessionCookieSecret value from the config
* stage mod,sum changes
* add clearer signup/signin redirect logic
* render error pages on 500/404s and only fall back to returning raw
  errors when the error is some unexpected kind
* add username/email "exists" funcs+tests - handle "not found" and "not
  unique" errors, return errors otherwise
2023-05-01 22:48:11 +02:00
leo 1d421465f5
go: have a dynamic {asset,tmpl}Path
All checks were successful
continuous-integration/drone/push Build is passing
* handle errors more specifically when loading assets/tmpls
2023-04-28 23:16:58 +02:00
leo 555bc65502
handlers: update error handling
All checks were successful
continuous-integration/drone/push Build is passing
* have a common error page tmpl
2023-04-21 12:33:14 +02:00
leo edf720bcb9
go: create proper (non-string) ctx key in user pkg
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 23:44:49 +02:00
leo f00b5bdaf8
handlers: add a TODO [skip ci] 2023-04-19 23:23:22 +02:00
leo aa63dafad4
go(handlers): add bluemonday HTML sanitiser
All checks were successful
continuous-integration/drone/push Build is passing
should aid at thwarting XSS.
2023-04-19 22:46:20 +02:00
leo 25335293eb
chore: clean up handlers pkg
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 22:08:17 +02:00
leo c6378d7dd3
pass logger ctx under key 'l'
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 05:18:01 +02:00
leo 608b0952b2
handlers: clean up
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 04:45:49 +02:00
leo 773b10e60b
handlers: handle err on redirects
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 04:09:24 +02:00
leo ff252df692
handlers: streamline SignupPost
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 04:01:03 +02:00
leo 62e038fa3e
simplify: funcMap member func
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 03:57:07 +02:00
leo 58c9446130
handlers: clean up deadcode
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 03:48:47 +02:00
leo 6ba09987a9
handlers: set cookie with SameSiteStrictMode
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 03:34:23 +02:00
leo 33c9b8a30e
tmpl: fix 500 on logout
All checks were successful
continuous-integration/drone/push Build is passing
2023-04-19 03:29:44 +02:00
leo 8cc43bba13
go: switch to a custom slog-based logging solution
All checks were successful
continuous-integration/drone/push Build is passing
* make all packages use the logger
* add a couple of convenience methods on the logger that enable
  formatting using fmt syntax
2023-04-19 02:12:27 +02:00
leo f129606b8f
add bulk changes
All checks were successful
continuous-integration/drone/push Build is passing
* add handlers for signin,singup,logout...
* introduce ent ORM and add user schema
* add live mode, devel mode to selectively turn on features via
  config/flags
* add templates, handle embedding moar smarter:
  * live mode uses live folder structure, else embedded templates are
    used
* start using tailwindcss to style stuff
* add development goodies for hot-reloading (browser-sync - bs.js)
* pimp-up config.dhall with actual custom config Type (enables remote
  schema and local values only as needed)
* add justfile (alternative to makefile for process automation)
2023-04-13 00:07:08 +02:00
leo 5937a24ad9
go: add a handler for admin endpoint(s) 2023-03-22 23:11:14 +01:00