calendar

2.2 KB

1. // lib/api.hl — THE FUNCTION ROUTES (calendar mission 001, code order): thin wrappers — check the input and the session,
2. // call the topic (lib/users.hl), answer. The calendar's own reads and writes are faces (components/calendar.hl).
3. //
4. // THE LOGIN BUTTON'S RETURN (ident README "How apps use ident"): /login/callback?ident_code=&next= → the user
5. // (lib/users.hl userOfLoginCode) → the session is signed in → back to `next` (lib/api-helpers.hl safePath). A FAILED
6. // LOGIN is a page (components/loginfailed.hl): the reason is parked in the session, then → /login/failed.
7. // These two write the session: project.hl hands them the request and the session store BY REFERENCE (&req, &sessions);
8. // a by-value copy would lose the write (tickets mission 010, gitoria mission 002, notes mission 002).
9. import { Response } from 'hl:http1'
10. import { randomBytes } from 'hl:crypto'
11. import { userOfLoginCode } from './users.hl'
12. import { safePath } from './api-helpers.hl'
14. static loginFailed = (&req, &sessions, why) => {
15. let s = req.session
16. fresh = s == null
17. if (fresh) { s = sessions.mint() }
18. s.data.loginError = why
19. sessions.save(s)
20. res = new Response('login failed: ' + why, { status = 302 headers = { 'Location' = '/login/failed' 'Cache-Control' = 'no-store' 'Content-Type' = 'text/plain; charset=utf-8' } })
21. if (fresh) { res.headers['Set-Cookie'] = sessions.cookieHeader(s.id) }
22. return res
23. }
25. // the function route gets the cookie's session as req.session (hybriel #11); none yet → minted here
26. static loginCallback = (route, &req, &sessions) => {
27. if (req.method != 'GET') { return loginFailed(&req, &sessions, 'GET only') }
28. q = req.query != null ? req.query : {}
29. code = q.ident_code
30. if (code == null || code == '') { return loginFailed(&req, &sessions, 'ident sent no login code') }
31. x = userOfLoginCode(code)
32. if (x.error != null) { return loginFailed(&req, &sessions, x.error) }
33. let s = req.session
34. fresh = s == null
35. if (fresh) { s = sessions.mint() }
36. s.user = { id = x.user.id }
37. s.data.tag = randomBytes(16)
38. s.data.loginError = null
39. sessions.save(s)
40. res = new Response('logged in', { status = 302 headers = { 'Location' = safePath(q.next) 'Cache-Control' = 'no-store' 'Content-Type' = 'text/plain; charset=utf-8' } })
41. if (fresh) { res.headers['Set-Cookie'] = sessions.cookieHeader(s.id) }
42. return res
43. }