Conditionally render admin basic

This commit is contained in:
Dominic Ferrando
2025-04-23 14:39:28 -04:00
parent a0f268b0d3
commit 098c65be70
3 changed files with 39 additions and 24 deletions
+33 -21
View File
@@ -43,6 +43,14 @@ func SumUniquePostIps(posts []database.Post) int {
return len(uniqueIpHashes)
}
func isAdmin(r *http.Request) bool {
isAdmin := false
if c, err := r.Cookie("comfy_admin"); err == nil {
isAdmin = util.IsAdminSessionValid(c.Value)
}
return isAdmin
}
func main() {
// -----------------
// SETUP
@@ -70,7 +78,7 @@ func main() {
// -----------------
// INDEX PAGE
r.With(util.AdminOnlyMiddleware).Get("/", func(w http.ResponseWriter, r *http.Request) {
r.Get("/", func(w http.ResponseWriter, r *http.Request) {
views.Index().Render(r.Context(), w)
})
@@ -85,7 +93,7 @@ func main() {
return
}
views.Board(board).Render(r.Context(), w)
views.Board(board, isAdmin(r)).Render(r.Context(), w)
})
// THREAD PAGE
@@ -365,7 +373,7 @@ func main() {
})
}
views.ThreadsCatalog(previews).Render(r.Context(), w)
views.ThreadsCatalog(previews, isAdmin(r)).Render(r.Context(), w)
})
// THREAD POSTS
@@ -408,12 +416,12 @@ func main() {
// ADMIN ROUTES (htmx)
// -----------------
r.Get("/admin/login", func(w http.ResponseWriter, r *http.Request) {
r.Get("/login", func(w http.ResponseWriter, r *http.Request) {
fmt.Println(util.AdminSessions)
admin.AdminLogin().Render(r.Context(), w)
})
r.Post("/admin/login", func(w http.ResponseWriter, r *http.Request) {
r.Post("/login", func(w http.ResponseWriter, r *http.Request) {
username := r.FormValue("username")
password := r.FormValue("password")
@@ -453,22 +461,7 @@ func main() {
})
r.Post("/admin/logout", func(w http.ResponseWriter, r *http.Request) {
if c, err := r.Cookie("comfy_admin"); err == nil {
util.DeleteAdminSession(c.Value)
}
http.SetCookie(w, &http.Cookie{
Name: "comfy_admin",
Value: "",
HttpOnly: true,
Secure: !dev,
Expires: time.Now(),
SameSite: http.SameSiteStrictMode,
Path: "/",
})
})
r.Get("/admin/me", func(w http.ResponseWriter, r *http.Request) {
r.Get("/authorized", func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "text/plain; charset=utf-8")
if c, err := r.Cookie("comfy_admin"); err == nil && util.IsAdminSessionValid(c.Value) {
@@ -478,6 +471,25 @@ func main() {
}
})
r.Route("/admin", func(r chi.Router) {
r.Use(util.AdminOnlyMiddleware)
r.Post("/logout", func(w http.ResponseWriter, r *http.Request) {
if c, err := r.Cookie("comfy_admin"); err == nil {
util.DeleteAdminSession(c.Value)
}
http.SetCookie(w, &http.Cookie{
Name: "comfy_admin",
Value: "",
HttpOnly: true,
Secure: !dev,
Expires: time.Now(),
SameSite: http.SameSiteStrictMode,
Path: "/",
})
})
})
// -----------------
// -----------------
+1 -1
View File
@@ -7,7 +7,7 @@ templ AdminLogin() {
<div class="admin-login-container">
<div style="display: none" id="adminLoginWarning" class="warning"></div>
<form
hx-post="/admin/login"
hx-post="/login"
hx-swap="none"
id="adminLoginForm"
_="
+5 -2
View File
@@ -18,7 +18,7 @@ templ BoardHeader(board database.Board) {
</header>
}
templ Board(board database.Board) {
templ Board(board database.Board, isAdmin bool) {
@shared.Layout() {
@BoardHeader(board)
<div class="new-post-container">
@@ -58,7 +58,7 @@ type CatalogThreadPreview struct {
IpCount int
}
templ ThreadsCatalog(previews []CatalogThreadPreview) {
templ ThreadsCatalog(previews []CatalogThreadPreview, isAdmin bool) {
<div id="catalog">
for _, preview := range previews {
{{ replyCount := strconv.FormatInt(int64(preview.ReplyCount), 10) }}
@@ -79,6 +79,9 @@ templ ThreadsCatalog(previews []CatalogThreadPreview) {
<p>
@templ.Raw(util.EnrichPost(preview.Body))
</p>
if isAdmin {
<button>X</button>
}
</div>
}
</div>