password protect admin stuffs

.gitignore

···
 *.db3-shm
 *.db3-wal
 **/.DS_Store
+.secret

.secret.example

···
+password

Cargo.lock

···
 checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
 
 [[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common",
+ "generic-array",
+]
+
+[[package]]
+name = "aes"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1"
+dependencies = [
+ "aead",
+ "aes",
+ "cipher",
+ "ctr",
+ "ghash",
+ "subtle",
+]
+
+[[package]]
 name = "aho-corasick"
 version = "1.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
  "chrono",
  "maud",
  "poem",
- "rand",
+ "rand 0.9.2",
  "rusqlite",
  "rusqlite_migration",
  "serde",
···
 ]
 
 [[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common",
+ "inout",
+]
+
+[[package]]
+name = "cookie"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ddef33a339a91ea89fb53151bd0a4689cfce27055c291dfa69945475d22c747"
+dependencies = [
+ "aes-gcm",
+ "base64",
+ "hkdf",
+ "hmac",
+ "percent-encoding",
+ "rand 0.8.5",
+ "sha2",
+ "subtle",
+ "time",
+ "version_check",
+]
+
+[[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
 checksum = "1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3"
 dependencies = [
  "generic-array",
+ "rand_core 0.6.4",
  "typenum",
 ]
 
 [[package]]
+name = "ctr"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0369ee1ad671834580515889b80f2ea915f23b8be8d0daa4bbaf2ac5c7590835"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
 name = "darling"
 version = "0.20.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
 dependencies = [
  "block-buffer",
  "crypto-common",
+ "subtle",
 ]
 
 [[package]]
···
 
 [[package]]
 name = "getrandom"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi",
+]
+
+[[package]]
+name = "getrandom"
 version = "0.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
···
  "libc",
  "r-efi",
  "wasip2",
+]
+
+[[package]]
+name = "ghash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0d8a4362ccb29cb0b265253fb0a2728f592895ee6854fd9bc13f2ffda266ff1"
+dependencies = [
+ "opaque-debug",
+ "polyval",
 ]
 
 [[package]]
···
 ]
 
 [[package]]
+name = "hkdf"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+dependencies = [
+ "hmac",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest",
+]
+
+[[package]]
 name = "http"
 version = "1.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
 ]
 
 [[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
 name = "io-uring"
 version = "0.7.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9afb3de4395d6b3e67a780b6de64b51c978ecf11cb9a462c66be7d4ca9039d33"
 dependencies = [
- "getrandom",
+ "getrandom 0.3.4",
  "libc",
 ]
 
···
 checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
 
 [[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
+[[package]]
 name = "parking_lot"
 version = "0.12.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
 dependencies = [
  "bytes",
  "chrono",
+ "cookie",
  "futures-util",
  "headers",
  "http",
···
  "smallvec",
  "sync_wrapper",
  "thiserror",
+ "time",
  "tokio",
  "tokio-util",
  "tracing",
···
  "proc-macro2",
  "quote",
  "syn",
+]
+
+[[package]]
+name = "polyval"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
 ]
 
 [[package]]
···
 
 [[package]]
 name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
 version = "0.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
 dependencies = [
- "rand_chacha",
- "rand_core",
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.3",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.6.4",
 ]
 
 [[package]]
···
 checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
 dependencies = [
  "ppv-lite86",
- "rand_core",
+ "rand_core 0.9.3",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.16",
 ]
 
 [[package]]
···
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38"
 dependencies = [
- "getrandom",
+ "getrandom 0.3.4",
 ]
 
 [[package]]
···
 ]
 
 [[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
 name = "shlex"
 version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
···
 version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
 
 [[package]]
 name = "syn"
···
 version = "1.0.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f63a545481291138910575129486daeaf8ac54aee4387fe7906919f7830c7d9d"
+
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common",
+ "subtle",
+]
 
 [[package]]
 name = "url"

Cargo.toml

···
 [dependencies]
 chrono = { version = "0.4", features = ["serde"] }
 maud = { version = "0.27", features = ["poem"] }
-poem = { version = "3", features = ["static-files", "chrono"] }
+poem = { version = "3", features = ["static-files", "chrono", "cookie"] }
 rand = "0.9"
 rusqlite = { version = "0.37.0", features = ["chrono"] }
 rusqlite_migration = "2.3.0"

src/main.rs

···
 
 use crate::{
     other_pages::{contact, index, projects},
-    post::{list_posts, new_post, submit_new_post, update_draft, view_post},
+    post::{list_posts, login, new_post, submit_new_post, update_draft, view_post},
 };
 use poem::{
     EndpointExt, Route, Server, endpoint::StaticFilesEndpoint, get, listener::TcpListener,
-    web::Data,
+    middleware::CookieJarManager, web::Data,
 };
 use rusqlite::Connection;
 use std::sync::{Arc, Mutex};
···
         .at("/blog/new", get(new_post).post(submit_new_post))
         .at("/blog/new/sync", poem::post(update_draft))
         .at("/blog/:slug", get(view_post))
+        .at("/login", poem::post(login))
         .nest("/static", StaticFilesEndpoint::new("./static/"))
+        .with(CookieJarManager::new())
         .data(conn.clone());
 
     Server::new(TcpListener::bind("0.0.0.0:3000"))

src/post.rs

···
+use std::fs::read_to_string;
+
 use crate::{
     D, W,
-    template::{footer, header, navbar, page, page_article},
+    template::{footer, header, header_extra, navbar, page, page_article},
 };
 use chrono::{DateTime, Local};
 use maud::{Markup, PreEscaped, html};
 use poem::{
-    IntoResponse, handler,
-    web::{Data, Form, Json, Path, Redirect},
+    Body, IntoResponse, handler,
+    http::StatusCode,
+    web::{
+        Data, Form, Json, Path, Redirect,
+        cookie::{Cookie, CookieJar},
+    },
 };
 use serde::Deserialize;
 
···
         })
         .unwrap();
 
-    page_article(
-        html! {
+    {
+        let markup = html! {
             h1.blog-head { (post.title)}
-            span.blog-subhead { em { "subtitle" }}
+            @let subtitle = post.subtitle.unwrap_or("".to_string());
+            span.blog-subhead { em { (subtitle) }}
             hr.frontmatter;
             p.blog-publish {
                 ( clock_icon() )
···
             }
 
             (PreEscaped(post.contents))
-        },
-        &format!("/blog/{}", post.slug),
-    )
+        };
+        let endpoint = &format!("/blog/{}", post.slug);
+        html! {
+            ( header_extra(html! { script defer src="/static/js/bsky-comments.js" {} }) )
+            div.wrapper {
+                (navbar(endpoint))
+                article {
+                    (markup)
+                }
+
+                @if post.bsky_uri.is_some() {
+                    section.page {
+                        noop {}
+                        bsky-comments post=[post.bsky_uri] {}
+                    }
+                }
+
+                ( footer() )
+            }
+        }
+    }
+}
+
+fn read_secret() -> String {
+    read_to_string("./.secret").unwrap().trim().to_string()
 }
 
 #[handler]
-pub fn new_post(Data(conn): D<&W>) -> Markup {
+pub async fn login(body: String, cookie_jar: &CookieJar) -> impl IntoResponse {
+    cookie_jar.add(Cookie::new_with_str("secret_pass", body));
+
+    html! {(cookie_jar.get("secret_pass").unwrap())}.into_response()
+}
+
+#[handler]
+pub fn new_post(cookie_jar: &CookieJar, Data(conn): D<&W>) -> impl IntoResponse {
+    // Auth check!
+    let secret = read_secret();
+    match cookie_jar.get("secret_pass") {
+        Some(cookie) if cookie.value_str() == secret => {}
+        _ => return (StatusCode::UNAUTHORIZED, "Unauthorized.").into_response(),
+    }
+
     let conn = conn.lock().unwrap();
 
     let mut stmt = conn.prepare("SELECT title, contents, slug, subtitle, category, bsky_uri, creation_datetime FROM draft").unwrap();
···
             h1 { "Make a new post" }
             form method="POST" {
                 label {
-                    "Title"
+                    "Title: "
                     input name="title" value=(post.title) {}
                 }
-                br;
                 label {
-                    "Slug"
+                    "Slug: "
                     input name="slug" value=(post.slug) {}
                 }
-                br;
                 label {
-                    "dtl"
+                    "dtl: "
                     input name="creation_datetime" type="datetime-local" value=(post.creation_datetime.format(ISO8601_DATE)) {}
                 }
+                label {
+                    "Subtitle: "
+                    input name="subtitle" value=[post.subtitle] {}
+                }
+                label {
+                    "Category: "
+                    input name="category" value=[post.category] {}
+                }
+                label {
+                    "bsky_uri:  "
+                    input name="bsky_uri" value=[post.bsky_uri] {}
+                    a href="https://pdsls.dev" {"pdsls"}
+                }
+                br;
                 br;
                 div style="display: flex; flex-direction: row; gap: 0.5rem; height: 100%; width: 100%; " {
 
                     textarea #editor name="contents" style="width: 100%; height: 50ch" { (post.contents) }
                     div #editorPreview style="border: 1px solid red; padding: 0 0.5rem; background-color: var(--bg-surface1); width: 100%" { "hii :3" }
                 }
-
                 br;
                 span { "Your draft is auto saved..." }
 
···
 
             script type="module" src="/static/js/post-new.js" {}
         }
-    }
+    }.into_response()
 }
 
 #[derive(Deserialize)]
···
 
 #[handler]
 pub fn submit_new_post(
+    cookie_jar: &CookieJar,
     Form(form): Form<SubmitNewPostForm>,
     Data(conn): D<&W>,
 ) -> impl IntoResponse {
+    // Auth check!
+    let secret = read_secret();
+    match cookie_jar.get("secret_pass") {
+        Some(cookie) if cookie.value_str() == secret => {}
+        _ => return (StatusCode::UNAUTHORIZED, "Unauthorized.").into_response(),
+    }
+
     let conn = conn.lock().unwrap();
 
     let creation_datetime =
···
     ))
     .expect("failed query");
 
-    Redirect::see_other(format!("/blog/{}", form.slug))
+    Redirect::see_other(format!("/blog/{}", form.slug)).into_response()
 }
 
 #[handler]
-pub fn update_draft(Json(form): Json<SubmitNewPostForm>, Data(conn): D<&W>) {
+pub fn update_draft(
+    cookie_jar: &CookieJar,
+    Json(form): Json<SubmitNewPostForm>,
+    Data(conn): D<&W>,
+) -> impl IntoResponse {
+    // Auth check!
+    let secret = read_secret();
+    match cookie_jar.get("secret_pass") {
+        Some(cookie) if cookie.value_str() == secret => {}
+        _ => return (StatusCode::UNAUTHORIZED, "Unauthorized.").into_response(),
+    }
+
     let conn = conn.lock().unwrap();
 
     let creation_datetime =
···
         creation_datetime,
     ))
     .expect("failed query");
+
+    return StatusCode::OK.into_response();
 }

src/template.rs

···
             link rel="stylesheet" type="text/css" href="/static/css/nav.css";
             link rel="stylesheet" type="text/css" href="/static/css/dialog.css";
 
+            script type="module" src="/static/js/login.js" defer {}
+
             meta name="theme-color" content="#b497ee";
             meta name="apple-mobile-web-app-status-bar-style" content="#b497ee";
 
···
 pub fn footer() -> Markup {
     html! {
         footer #page-footer {
-            div.tablet-hide {
+            div {
                 span {
                     "This website is running on "
                     a href="https://tangled.org/@j0.lol/bog" style="color: var(--fg-header)"
···
                     { samp { (env!("VERGEN_GIT_SHA")[..8]) } " (" (env!("VERGEN_GIT_COMMIT_DATE")) ")" }
                     "."
                 }
+                br;
+                button .subtle.clickme #login-button { "auth" }
+                span .subtle {" • "}
+                a .subtle.clickme href="/blog/new" { "new" }
             }
+
             (PreEscaped("
             <div class=\"_88x31s\">
                 <span class=\"sr-only\">Miscellaneous links:</span>

static/css/style.css

···
             width: 100%;
             margin: 0 auto;
             border: none;
+            box-shadow: none;
         }
     }
 
···
 
     @media (width <= 48rem) {
         & {
-            flex-direction: row-reverse;
+            flex-direction: column;
         }
     }
 
     @media (width <= 27rem) {
         & {
             padding: 0.5em;
-            font-size: 2em;
         }
     }
 }
···
     .mobile-hide {
         display: inherit;
     }
-
-    footer#page-footer {
-        padding: 0.5em;
-        font-size: 2em;
-    }
 }
 
 .sr-only {
···
     padding-right: 0.20em;
     padding-left: 0.20rem;
 }
+
+.subtle {
+    background: none;
+    border: none;
+    font-size: 0.8em;
+    padding: 0;
+    color: rgba(34, 30, 46, 0.3) !important;
+}
+.subtle.clickme {
+    text-decoration: underline;
+    cursor: pointer;
+}

static/js/login.js

···
+async function login() {
+  const pass = prompt("What's the code?");
+
+  if (pass != null) {
+    const resp = await fetch(`/login`, {
+      method: "POST",
+      credentials: "include",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: pass,
+    });
+
+    const txt = await resp.text();
+    console.log(txt);
+  }
+
+}
+
+document.querySelector("#login-button")
+  .addEventListener('click', (e) => { login() });

static/js/post-new.js

···
 const inputTitle = document.querySelector('input[name=\"title\"]');
 const inputSlug = document.querySelector('input[name=\"slug\"]');
 const inputDt = document.querySelector('input[name=\"creation_datetime\"]');
+const inputSubtitle = document.querySelector('input[name=\"subtitle\"]');
+const inputCategory = document.querySelector('input[name=\"category\"]');
+const inputBskyUri = document.querySelector('input[name=\"bsky_uri\"]');
+
 const editor = document.querySelector('#editor');
 const editorPreview = document.querySelector('#editorPreview');
 
 function preview() {
   editorPreview.innerHTML = `
-    <h1>${inputTitle.value}</h1>
+    <h1 class="blog-head">${inputTitle.value}</h1>
+    <span class="blog-subhead"><em>${inputSubtitle.value}</em></span>
     <hr class='frontmatter'>
     <p class='blog-publish'>
       🕒 ${inputDt.value}
···
       title: inputTitle.value,
       slug: inputSlug.value,
       contents: editor.value,
-      creation_datetime: inputDt.value
+      creation_datetime: inputDt.value,
+      subtitle: inputSubtitle.value != "" ? inputSubtitle.value : null,
+      category: inputCategory.value != "" ? inputCategory.value : null,
+      bsky_uri: inputBskyUri.value != "" ? inputBskyUri.value : null,
     }),
   });
 }
 
-[editor, inputTitle, inputSlug, inputDt].forEach((el) => {
+[editor, inputTitle, inputSubtitle, inputSlug, inputDt].forEach((el) => {
   el.addEventListener('input', (event) => {
     preview();
     syncDraft();