agnes/s1llyw0rdz
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

redirects to login when not authorized

Browse source
This commit is contained in:
m15o 2021-12-10 18:56:41 +01:00
parent 44b2dfc6d1
commit 5f97675216
10 changed files with 20 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
web/handler/admin_show.go
View file

@ -10,11 +10,11 @@ func (h *Handler) showAdminView(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
username, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
if username != "m15o" {
unauthorized(w)
unauthorized(w, r)
return
}
users, err := h.storage.InactiveUsers()
@ -31,11 +31,11 @@ func (h *Handler) activateUser(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
username, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
if username != "m15o" {
unauthorized(w)
unauthorized(w, r)
return
}
name := r.URL.Query().Get("name")
@ -50,11 +50,11 @@ func (h *Handler) deleteUser(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
username, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
if username != "m15o" {
unauthorized(w)
unauthorized(w, r)
return
}
name := r.URL.Query().Get("name")

4
web/handler/handler.go
View file

@ -19,8 +19,8 @@ func notFound(w http.ResponseWriter) {
http.Error(w, "Page Not Found", http.StatusNotFound)
}
func unauthorized(w http.ResponseWriter) {
http.Error(w, "Unauthorized", http.StatusUnauthorized)
func unauthorized(w http.ResponseWriter, r *http.Request) {
http.Redirect(w, r, fmt.Sprintf("/login"), http.StatusFound)
}
type Handler struct {

4
web/handler/settings_show.go
View file

@ -6,12 +6,12 @@ func (h *Handler) showSettingsView(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
username, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
user, err := h.storage.UserByName(username)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
session, err := h.sess.Store.Get(r, "status")

2
web/handler/settings_update.go
View file

@ -9,7 +9,7 @@ import (
func (h *Handler) updateSettings(w http.ResponseWriter, r *http.Request) {
user, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
f := form.NewSettingsForm(r)

2
web/handler/status_create.go
View file

@ -9,7 +9,7 @@ func (h *Handler) showNewStatusView(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
_, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
h.view("create_status").Execute(w, map[string]interface{}{"status": &model.Status{}})

4
web/handler/status_edit.go
View file

@ -22,7 +22,7 @@ func (h *Handler) showEditStatusView(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
user, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
id, err := strconv.ParseInt(r.URL.Query().Get("id"), 10, 64)
@ -36,7 +36,7 @@ func (h *Handler) showEditStatusView(w http.ResponseWriter, r *http.Request) {
return
}
if user != status.User {
unauthorized(w)
unauthorized(w, r)
return
}
session, err := h.sess.Store.Get(r, "status")

4
web/handler/status_remove.go
View file

@ -9,7 +9,7 @@ func (h *Handler) handleRemoveStatus(w http.ResponseWriter, r *http.Request) {
protectClickJacking(w)
user, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
id, err := strconv.ParseInt(r.URL.Query().Get("id"), 10, 64)
@ -23,7 +23,7 @@ func (h *Handler) handleRemoveStatus(w http.ResponseWriter, r *http.Request) {
return
}
if user != status.User {
unauthorized(w)
unauthorized(w, r)
return
}
switch r.Method {

2
web/handler/status_save.go
View file

@ -9,7 +9,7 @@ import (
func (h *Handler) saveStatus(w http.ResponseWriter, r *http.Request) {
user, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
f := form.NewStatusForm(r)

4
web/handler/status_update.go
View file

@ -10,7 +10,7 @@ import (
func (h *Handler) updateStatus(w http.ResponseWriter, r *http.Request) {
user, err := h.getUser(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
id, err := strconv.ParseInt(r.URL.Query().Get("id"), 10, 64)
@ -25,7 +25,7 @@ func (h *Handler) updateStatus(w http.ResponseWriter, r *http.Request) {
}
if user != status.User {
unauthorized(w)
unauthorized(w, r)
return
}
f := form.NewStatusForm(r)

2
web/handler/user_show.go
View file

@ -26,7 +26,7 @@ import (
func (h *Handler) showManageView(w http.ResponseWriter, r *http.Request) {
logged, err := h.sess.Get(r)
if err != nil {
unauthorized(w)
unauthorized(w, r)
return
}
var page int64 = 0