···

       
140
       
 
       
	clientSession.Values[appview.SessionPds] = pdsEndpoint

     

       
141
       
 
       
	clientSession.Values[appview.SessionAccessJwt] = atSessionish.GetAccessJwt()

     

       
142
       
 
       
	clientSession.Values[appview.SessionRefreshJwt] = atSessionish.GetRefreshJwt()

     

       
143
       
-
       
	clientSession.Values[appview.SessionExpiry] = time.Now().Add(time.Minute * 15).Format(time.RFC3339)

     

       
144
       
 
       
	clientSession.Values[appview.SessionAuthenticated] = true

     

       
145
       
 
       
	return clientSession.Save(r, w)

     

       
146
       
 
       
}

     

       
147
       
 
       


     

       
148
       
 
       
func (a *Auth) AuthorizedClient(r *http.Request) (*xrpc.Client, error) {

     

       
149
       
 
       
	clientSession, err := a.Store.Get(r, "appview-session")

     

       
150
       
-
       


     

       
151
       
 
       
	if err != nil || clientSession.IsNew {

     

       
152
       
 
       
		return nil, err

     

       
153
       
 
       
	}

     

···

       
140
       
 
       
	clientSession.Values[appview.SessionPds] = pdsEndpoint

     

       
141
       
 
       
	clientSession.Values[appview.SessionAccessJwt] = atSessionish.GetAccessJwt()

     

       
142
       
 
       
	clientSession.Values[appview.SessionRefreshJwt] = atSessionish.GetRefreshJwt()

     

       
143
       
+
       
	clientSession.Values[appview.SessionExpiry] = time.Now().Add(time.Second * 5).Format(time.RFC3339)

     

       
144
       
 
       
	clientSession.Values[appview.SessionAuthenticated] = true

     

       
145
       
 
       
	return clientSession.Save(r, w)

     

       
146
       
 
       
}

     

       
147
       
 
       


     

       
148
       
 
       
func (a *Auth) AuthorizedClient(r *http.Request) (*xrpc.Client, error) {

     

       
149
       
 
       
	clientSession, err := a.Store.Get(r, "appview-session")

     

       
0
       
 
       

     

       
150
       
 
       
	if err != nil || clientSession.IsNew {

     

       
151
       
 
       
		return nil, err

     

       
152
       
 
       
	}

     

···

       
21
       
 
       
func AuthMiddleware(s *State) Middleware {

     

       
22
       
 
       
	return func(next http.Handler) http.Handler {

     

       
23
       
 
       
		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

     

       
24
       
-
       
			session, _ := s.auth.Store.Get(r, appview.SessionName)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
25
       
 
       
			authorized, ok := session.Values[appview.SessionAuthenticated].(bool)

     

       
26
       
 
       
			if !ok || !authorized {

     

       
27
       
 
       
				log.Printf("not logged in, redirecting")

     
···

       
38
       
 
       
				http.Redirect(w, r, "/login", http.StatusTemporaryRedirect)

     

       
39
       
 
       
				return

     

       
40
       
 
       
			}

     

       
41
       
-
       
			pdsUrl := session.Values[appview.SessionPds].(string)

     

       
42
       
-
       
			did := session.Values[appview.SessionDid].(string)

     

       
43
       
-
       
			refreshJwt := session.Values[appview.SessionRefreshJwt].(string)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
44
       
 
       


     

       
45
       
 
       
			if time.Now().After(expiry) {

     

       
46
       
 
       
				log.Println("token expired, refreshing ...")

     

···

       
21
       
 
       
func AuthMiddleware(s *State) Middleware {

     

       
22
       
 
       
	return func(next http.Handler) http.Handler {

     

       
23
       
 
       
		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

     

       
24
       
+
       
			session, err := s.auth.GetSession(r)

     

       
25
       
+
       
			if session.IsNew || err != nil {

     

       
26
       
+
       
				log.Printf("not logged in, redirecting")

     

       
27
       
+
       
				http.Redirect(w, r, "/login", http.StatusTemporaryRedirect)

     

       
28
       
+
       
				return

     

       
29
       
+
       
			}

     

       
30
       
+
       


     

       
31
       
 
       
			authorized, ok := session.Values[appview.SessionAuthenticated].(bool)

     

       
32
       
 
       
			if !ok || !authorized {

     

       
33
       
 
       
				log.Printf("not logged in, redirecting")

     
···

       
44
       
 
       
				http.Redirect(w, r, "/login", http.StatusTemporaryRedirect)

     

       
45
       
 
       
				return

     

       
46
       
 
       
			}

     

       
47
       
+
       
			pdsUrl, ok1 := session.Values[appview.SessionPds].(string)

     

       
48
       
+
       
			did, ok2 := session.Values[appview.SessionDid].(string)

     

       
49
       
+
       
			refreshJwt, ok3 := session.Values[appview.SessionRefreshJwt].(string)

     

       
50
       
+
       


     

       
51
       
+
       
			if !ok1 || !ok2 || !ok3 {

     

       
52
       
+
       
				log.Println("invalid expiry time", err)

     

       
53
       
+
       
				http.Redirect(w, r, "/login", http.StatusTemporaryRedirect)

     

       
54
       
+
       
				return

     

       
55
       
+
       
			}

     

       
56
       
 
       


     

       
57
       
 
       
			if time.Now().After(expiry) {

     

       
58
       
 
       
				log.Println("token expired, refreshing ...")

     

···

       
836
       
 
       


     

       
837
       
 
       
			// settings routes, needs auth

     

       
838
       
 
       
			r.Group(func(r chi.Router) {

     

       
0
       
 
       

     

       
839
       
 
       
				r.With(RepoPermissionMiddleware(s, "repo:settings")).Route("/settings", func(r chi.Router) {

     

       
840
       
 
       
					r.Get("/", s.RepoSettings)

     

       
841
       
 
       
					r.With(RepoPermissionMiddleware(s, "repo:invite")).Put("/collaborator", s.AddCollaborator)

     
···

       
858
       
 
       


     

       
859
       
 
       
	r.Get("/", s.Timeline)

     

       
860
       
 
       


     

       
861
       
-
       
	r.Get("/logout", s.Logout)

     

       
862
       
 
       


     

       
863
       
 
       
	r.Route("/login", func(r chi.Router) {

     

       
864
       
 
       
		r.Get("/", s.Login)

     

···

       
836
       
 
       


     

       
837
       
 
       
			// settings routes, needs auth

     

       
838
       
 
       
			r.Group(func(r chi.Router) {

     

       
839
       
+
       
				r.Use(AuthMiddleware(s))

     

       
840
       
 
       
				r.With(RepoPermissionMiddleware(s, "repo:settings")).Route("/settings", func(r chi.Router) {

     

       
841
       
 
       
					r.Get("/", s.RepoSettings)

     

       
842
       
 
       
					r.With(RepoPermissionMiddleware(s, "repo:invite")).Put("/collaborator", s.AddCollaborator)

     
···

       
859
       
 
       


     

       
860
       
 
       
	r.Get("/", s.Timeline)

     

       
861
       
 
       


     

       
862
       
+
       
	r.With(AuthMiddleware(s)).Get("/logout", s.Logout)

     

       
863
       
 
       


     

       
864
       
 
       
	r.Route("/login", func(r chi.Router) {

     

       
865
       
 
       
		r.Get("/", s.Login)