surtur
6b45213649
All checks were successful
continuous-integration/drone/push Build is passing
* add user onboarding workflow * fix user editing (no edits of passwords of regular users after onboarding) * refresh HIBP breach cache in DB on app start-up * display HIBP breach details * fix request scheduling to prevent panics (this still needs some love..) * fix middleware auth * add TODOs * update head.tmpl * reword some error messages
130 lines
2.8 KiB
Go
130 lines
2.8 KiB
Go
// Copyright 2023 wanderer <a_mirre at utb dot cz>
|
|
// SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
package handlers
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
moduser "git.dotya.ml/mirre-mt/pcmt/modules/user"
|
|
"github.com/gorilla/sessions"
|
|
"github.com/labstack/echo/v4"
|
|
)
|
|
|
|
func InitialPasswordChange() echo.HandlerFunc {
|
|
return func(c echo.Context) error {
|
|
addHeaders(c)
|
|
|
|
u, ok := c.Get("sessUsr").(moduser.User)
|
|
if !ok {
|
|
return renderErrorPage(
|
|
c,
|
|
http.StatusUnauthorized,
|
|
http.StatusText(http.StatusUnauthorized)+", perhaps you need to log in first?",
|
|
"Username was nil",
|
|
)
|
|
} else if u.IsAdmin {
|
|
status := http.StatusUnauthorized
|
|
msg := http.StatusText(status)
|
|
|
|
return renderErrorPage(
|
|
c, status, msg+": You should not be here", "This endpoint is for users only",
|
|
)
|
|
}
|
|
|
|
ctx, ok := c.Get("sloggerCtx").(context.Context)
|
|
if !ok {
|
|
ctx = context.WithValue(context.Background(), moduser.CtxKey{}, slogger)
|
|
}
|
|
|
|
f, err := moduser.UsrFinishedSetup(ctx, dbclient, u.ID)
|
|
|
|
switch {
|
|
case c.Request().Method == "POST":
|
|
switch {
|
|
case err != nil:
|
|
return renderErrorPage(
|
|
c,
|
|
http.StatusInternalServerError,
|
|
http.StatusText(http.StatusInternalServerError),
|
|
err.Error(),
|
|
)
|
|
|
|
case f:
|
|
return c.Redirect(http.StatusSeeOther, "/user/init-password-change")
|
|
}
|
|
|
|
pw := new(initPasswordChange)
|
|
|
|
if err := c.Bind(pw); err != nil {
|
|
return renderErrorPage(
|
|
c,
|
|
http.StatusBadRequest,
|
|
http.StatusText(http.StatusBadRequest),
|
|
err.Error(),
|
|
)
|
|
}
|
|
|
|
err = moduser.ChangePassFirstLogin(ctx, dbclient, u.ID, pw.NewPassword)
|
|
if err != nil {
|
|
c.Logger().Errorf("error changing initial user password: %q", err)
|
|
|
|
return renderErrorPage(
|
|
c,
|
|
http.StatusInternalServerError,
|
|
http.StatusText(http.StatusInternalServerError),
|
|
err.Error(),
|
|
)
|
|
}
|
|
|
|
if sess, ok := c.Get("sess").(*sessions.Session); ok {
|
|
sess.Values["flash"] = "Successfully updated your password"
|
|
_ = sess.Save(c.Request(), c.Response())
|
|
}
|
|
|
|
return c.Redirect(http.StatusSeeOther, "/home")
|
|
|
|
case c.Request().Method == "GET":
|
|
switch {
|
|
case err != nil:
|
|
return renderErrorPage(
|
|
c,
|
|
http.StatusInternalServerError,
|
|
http.StatusText(http.StatusInternalServerError),
|
|
err.Error(),
|
|
)
|
|
|
|
case f:
|
|
return c.Redirect(http.StatusSeeOther, "/home")
|
|
}
|
|
|
|
csrf := c.Get("csrf").(string)
|
|
p := newPage()
|
|
|
|
p.Title = "Initial password change"
|
|
p.Current = "init-password-change"
|
|
p.CSRF = csrf
|
|
p.User = u
|
|
|
|
err := c.Render(
|
|
http.StatusOK,
|
|
"user/init-password-change.tmpl",
|
|
p,
|
|
)
|
|
if err != nil {
|
|
c.Logger().Errorf("error: %q", err)
|
|
|
|
return renderErrorPage(
|
|
c,
|
|
http.StatusInternalServerError,
|
|
http.StatusText(http.StatusInternalServerError),
|
|
err.Error(),
|
|
)
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|