knowyt/server/src/handler/private.go

package handler

import (
	"fmt"
	"net/http"
)

func (authMux *AuthMux) PrivateHandleFunc(pattern string, handlerFunc HandlerFunc) {
	authMux.mux.HandleFunc(pattern, func(w http.ResponseWriter, r *http.Request) {
		if authMux.isAuthenticated(r) {
			handlerFunc(w, r)
			return
		}
		authMux.accessDenied(w, r)
	})
}

func (authMux *AuthMux) PrivateHandle(pattern string, handler http.Handler) {
	authMux.PrivateHandleFunc(pattern, func(w http.ResponseWriter, r *http.Request) {
		handler.ServeHTTP(w, r)
	})
}

func (authMux *AuthMux) accessDenied(w http.ResponseWriter, r *http.Request) {
	w.WriteHeader(http.StatusForbidden)
	fmt.Fprintf(w, "Forbidden")
}

func (authMux *AuthMux) isAuthenticated(r *http.Request) bool {
	authCookie, err := r.Cookie("knyt-auth")
	if err != nil {
		fmt.Printf("%v\n", err)
		return false
	}
	fmt.Printf("isAuthenticated? %s\n", authCookie.Value)

	usr, usrErr := authMux.app.GetUsers().GetUserById(authCookie.Value)
	if usrErr != nil {
		return false
	}

	fmt.Printf("\"%s\" ?= \"%s\"\n", usr.Id, authCookie.Value)
	return usr.Id == authCookie.Value
}