Create admin only middleware

internal/util/admins.go

@@ -3,6 +3,7 @@ package util
 import (
 	"crypto/rand"
 	"encoding/hex"
+	"net/http"
 	"sync"
 	"time"
 )
@@ -65,3 +66,14 @@ func HasExistingAdminSession(username string) bool {
 
 	return false
 }
+
+func AdminOnlyMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		c, err := r.Cookie("comfy_admin")
+		if err != nil || !IsAdminSessionValid(c.Value) {
+			http.Error(w, "Unauthorized", http.StatusUnauthorized)
+			return
+		}
+		next.ServeHTTP(w, r)
+	})
+}

web/main.go

@@ -70,7 +70,7 @@ func main() {
 	// -----------------
 
 	// INDEX PAGE
-	r.Get("/", func(w http.ResponseWriter, r *http.Request) {
+	r.With(util.AdminOnlyMiddleware).Get("/", func(w http.ResponseWriter, r *http.Request) {
 		views.Index().Render(r.Context(), w)
 	})