moshyfawn.dev
forked from
tangled.org/core
fork
Configure Feed
Select the types of activity you want to include in your feed.
Monorepo for Tangled
fork
Configure Feed
Select the types of activity you want to include in your feed.
oppi.li
1package middleware
2
3import (
4 "context"
5 "log"
6 "net/http"
7 "strconv"
8 "time"
9
10 comatproto "github.com/bluesky-social/indigo/api/atproto"
11 "github.com/bluesky-social/indigo/xrpc"
12 "tangled.sh/tangled.sh/core/appview"
13 "tangled.sh/tangled.sh/core/appview/auth"
14 "tangled.sh/tangled.sh/core/appview/pagination"
15)
16
17type Middleware func(http.Handler) http.Handler
18
19func AuthMiddleware(a *auth.Auth) Middleware {
20 return func(next http.Handler) http.Handler {
21 return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
22 redirectFunc := func(w http.ResponseWriter, r *http.Request) {
23 http.Redirect(w, r, "/login", http.StatusTemporaryRedirect)
24 }
25 if r.Header.Get("HX-Request") == "true" {
26 redirectFunc = func(w http.ResponseWriter, _ *http.Request) {
27 w.Header().Set("HX-Redirect", "/login")
28 w.WriteHeader(http.StatusOK)
29 }
30 }
31
32 session, err := a.GetSession(r)
33 if session.IsNew || err != nil {
34 log.Printf("not logged in, redirecting")
35 redirectFunc(w, r)
36 return
37 }
38
39 authorized, ok := session.Values[appview.SessionAuthenticated].(bool)
40 if !ok || !authorized {
41 log.Printf("not logged in, redirecting")
42 redirectFunc(w, r)
43 return
44 }
45
46 // refresh if nearing expiry
47 // TODO: dedup with /login
48 expiryStr := session.Values[appview.SessionExpiry].(string)
49 expiry, err := time.Parse(time.RFC3339, expiryStr)
50 if err != nil {
51 log.Println("invalid expiry time", err)
52 redirectFunc(w, r)
53 return
54 }
55 pdsUrl, ok1 := session.Values[appview.SessionPds].(string)
56 did, ok2 := session.Values[appview.SessionDid].(string)
57 refreshJwt, ok3 := session.Values[appview.SessionRefreshJwt].(string)
58
59 if !ok1 || !ok2 || !ok3 {
60 log.Println("invalid expiry time", err)
61 redirectFunc(w, r)
62 return
63 }
64
65 if time.Now().After(expiry) {
66 log.Println("token expired, refreshing ...")
67
68 client := xrpc.Client{
69 Host: pdsUrl,
70 Auth: &xrpc.AuthInfo{
71 Did: did,
72 AccessJwt: refreshJwt,
73 RefreshJwt: refreshJwt,
74 },
75 }
76 atSession, err := comatproto.ServerRefreshSession(r.Context(), &client)
77 if err != nil {
78 log.Println("failed to refresh session", err)
79 redirectFunc(w, r)
80 return
81 }
82
83 sessionish := auth.RefreshSessionWrapper{atSession}
84
85 err = a.StoreSession(r, w, &sessionish, pdsUrl)
86 if err != nil {
87 log.Printf("failed to store session for did: %s\n: %s", atSession.Did, err)
88 return
89 }
90
91 log.Println("successfully refreshed token")
92 }
93
94 next.ServeHTTP(w, r)
95 })
96 }
97}
98
99func Paginate(next http.Handler) http.Handler {
100 return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
101 page := pagination.FirstPage()
102
103 offsetVal := r.URL.Query().Get("offset")
104 if offsetVal != "" {
105 offset, err := strconv.Atoi(offsetVal)
106 if err != nil {
107 log.Println("invalid offset")
108 } else {
109 page.Offset = offset
110 }
111 }
112
113 limitVal := r.URL.Query().Get("limit")
114 if limitVal != "" {
115 limit, err := strconv.Atoi(limitVal)
116 if err != nil {
117 log.Println("invalid limit")
118 } else {
119 page.Limit = limit
120 }
121 }
122
123 ctx := context.WithValue(r.Context(), "page", page)
124 next.ServeHTTP(w, r.WithContext(ctx))
125 })
126}