88 lines
2.1 KiB
Go
88 lines
2.1 KiB
Go
package controllers
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"net/http"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"gitlab.com/rawleyifowler/site-rework/models"
|
|
"gitlab.com/rawleyifowler/site-rework/utils"
|
|
)
|
|
|
|
var (
|
|
key string = utils.LoadApiKey("api_key.pem")
|
|
admin_hash string = utils.LoadAdminHash("admin_hash.pem")
|
|
att map[string]uint32 = make(map[string]uint32)
|
|
)
|
|
|
|
// Ensure is logged in
|
|
func AdminOnly() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
k, err := c.Cookie("admin_key")
|
|
if err != nil {
|
|
c.Redirect(http.StatusPermanentRedirect, "/admin/")
|
|
}
|
|
if k == key {
|
|
c.Next()
|
|
}
|
|
}
|
|
}
|
|
|
|
func RegisterAdminGroup(r *gin.RouterGroup) {
|
|
r.GET("/", utils.ServePage("login.tmpl"))
|
|
r.POST("/login", HandleLogin)
|
|
r.GET("/post", AdminOnly(), utils.ServePage("create_post.tmpl"))
|
|
r.POST("/post", AdminOnly(), CreatePost)
|
|
}
|
|
|
|
func HandleLogin(c *gin.Context) {
|
|
if att[c.ClientIP()] > 5 {
|
|
c.Redirect(http.StatusPermanentRedirect, "/admin/")
|
|
}
|
|
err := c.Request.ParseForm()
|
|
if err != nil {
|
|
c.Redirect(http.StatusPermanentRedirect, "/admin/")
|
|
}
|
|
f := c.Request.Form
|
|
for _, v := range []string{"username", "password"} {
|
|
if !f.Has(v) {
|
|
c.AbortWithStatus(http.StatusNotAcceptable)
|
|
}
|
|
}
|
|
str := f.Get("username") + f.Get("password")
|
|
s := sha256.New()
|
|
s.Sum([]byte(str))
|
|
var h []byte
|
|
s.Write(h)
|
|
if string(h) == admin_hash {
|
|
c.SetCookie("admin_key", key, 1, "/", "rawley.xyz", true, true)
|
|
c.Redirect(http.StatusTemporaryRedirect, "/admin/post")
|
|
} else {
|
|
att[c.ClientIP()]++
|
|
c.Redirect(http.StatusTemporaryRedirect, "/admin/")
|
|
}
|
|
}
|
|
|
|
func CreatePost(c *gin.Context) {
|
|
err := c.Request.ParseForm()
|
|
if err != nil {
|
|
c.AbortWithStatus(http.StatusBadRequest)
|
|
}
|
|
f := c.Request.Form
|
|
for _, v := range []string{"title", "content", "url"} {
|
|
if !f.Has(v) {
|
|
c.AbortWithStatus(http.StatusNotAcceptable)
|
|
}
|
|
}
|
|
b := AddBlogPost(&models.BlogPost{
|
|
Title: f.Get("title"),
|
|
Content: f.Get("content"),
|
|
Url: f.Get("url"),
|
|
})
|
|
if b {
|
|
c.Redirect(http.StatusTemporaryRedirect, "/blog/post/"+f.Get("url"))
|
|
} else {
|
|
c.Redirect(http.StatusTemporaryRedirect, "/admin/post")
|
|
}
|
|
}
|