Checkpoint

This commit is contained in:
Isaac Shoebottom 2024-08-22 19:25:14 -03:00
parent 6e27b73960
commit d38c1d7fd6
2 changed files with 228 additions and 82 deletions

View File

@ -17,14 +17,24 @@
<body>
<div style="display: flex; align-items: center; flex-direction: column">
<p>{{.Message}}</p>
{{if .ShowForm}}
<form action="" method="post">
{{if .ShowInput}}
<form action="/post" method="post">
<label>
API Key:
<input type="text" name="key" required>
How many hours should the timeout be?
<input type="number" name="next" min="1" max="24" value="24" step="1" required>
</label>
<button type="submit">Submit</button>
</form>
{{end}}
{{if .ShowLogin}}
<form action="/login" method="post">
<label>
<input type="text" name="username" required>
<input type="password" name="password" required>
</label>
<button type="submit">Login</button>
</form>
{{end}}
</div>
</body>

282
main.go
View File

@ -1,11 +1,15 @@
package main
import (
"crypto/rand"
"encoding/json"
"fmt"
"html/template"
"math"
"math/big"
"net/http"
"os"
"strconv"
"time"
)
@ -16,63 +20,72 @@ type Timestamp struct {
type Store struct {
Username string `json:"username"`
Timestamps []int64 `json:"timestamps"`
Timestamps []Timestamp `json:"timestamps"`
}
type PageData struct {
Title string
ShowForm bool
Message string
ShowLogin bool
ShowInput bool
}
var Username string
var Password string
var DataDir string
var DataStore string
var Authorised []int64 // List of authorised "uuids"
func main() {
// Get environment variables
Username = os.Getenv("USERNAME")
fmt.Println("Username: ", Username)
Password = os.Getenv("API_KEY")
fmt.Println("API_KEY: ", Password)
DataDir = os.Getenv("DATA_DIR")
if DataDir == "" {
DataDir = "./data"
}
fmt.Println("DATA_DIR: ", DataDir)
DataStore = DataDir + "/data.json"
Reset := os.Getenv("RESET")
if Reset == "true" {
if err := os.Remove(DataStore); err != nil {
fmt.Println("Error removing file, check permissions")
}
if err := os.Remove(DataDir); err != nil {
fmt.Println("Error removing directory, check permissions")
}
}
// Check if directory exists, if not create it
if _, err := os.Stat("./data"); os.IsNotExist(err) {
err := os.Mkdir("./data", 0755)
if _, err := os.Stat(DataDir); os.IsNotExist(err) {
err := os.Mkdir(DataDir, 0755)
if err != nil {
fmt.Println("Error creating directory, check permissions")
os.Exit(1)
}
}
// Set environment variables
RESET := os.Getenv("RESET")
if RESET == "true" {
if err := os.Remove("./data/taken.json"); err != nil {
fmt.Println("Error removing file, check permissions")
}
}
API_KEY := os.Getenv("API_KEY")
fmt.Println("API_KEY: ", API_KEY)
// Start server
http.HandleFunc("/", index)
if err := http.ListenAndServe(":8080", nil); err != nil {
fmt.Println("Error starting server")
os.Exit(1)
}
}
func handlePost() PageData {
current := time.Now().Unix()
var day int64 = 60 * 60 * 24
next := current + day
// If there is no file, create one
if _, err := os.Stat("./data/taken.json"); os.IsNotExist(err) {
if _, err := os.Create("./data/taken.json"); err != nil {
// Check if file exists, if not create it, and write empty json
if _, err := os.Stat(DataStore); os.IsNotExist(err) {
if _, err := os.Create(DataStore); err != nil {
fmt.Println("Error creating file, check permissions")
os.Exit(1)
}
}
// Write to file
if file, err := os.OpenFile("./data/taken.json", os.O_RDWR, os.ModePerm); err != nil {
if file, err := os.OpenFile(DataStore, os.O_RDWR, os.ModePerm); err != nil {
fmt.Println("Error opening file, check permissions")
os.Exit(1)
} else {
encoder := json.NewEncoder(file)
if err = encoder.Encode(Timestamp{current, next}); err != nil {
store := Store{
Username: Username,
Timestamps: []Timestamp{},
}
if err = encoder.Encode(store); err != nil {
fmt.Println("Error encoding file")
os.Exit(1)
}
@ -81,68 +94,191 @@ func handlePost() PageData {
os.Exit(1)
}
}
}
return PageData{
Title: "Form submitted",
ShowForm: false,
Message: "Form submitted",
// Start server
http.HandleFunc("/", index)
http.HandleFunc("/post", post)
http.HandleFunc("/login", login)
http.HandleFunc("/logout", logout)
if err := http.ListenAndServe(":8080", nil); err != nil {
fmt.Println("Error starting server")
os.Exit(1)
}
}
func checkFile() PageData {
// Check if file exists
file, err := os.Open("./data/taken.json")
if err != nil {
fmt.Println("Error opening file, check perms or likely does not exist")
return PageData{
Title: "Form page",
Message: "Hello first time user, please enter API key to submit form",
ShowForm: true,
}
}
// Decode file
info := Timestamp{}
func commit(next int64) {
current := time.Now().Unix()
// Next is in hours, so convert to seconds
next = next * 60 * 60
// Next is the time when the form can be submitted again
next = current + next
// Read from file
if file, err := os.OpenFile(DataStore, os.O_RDWR, os.ModePerm); err != nil {
fmt.Println("Error opening file, check permissions")
os.Exit(1)
} else {
decoder := json.NewDecoder(file)
if err := decoder.Decode(&info); err != nil {
store := Store{}
if err = decoder.Decode(&store); err != nil {
fmt.Println("Error decoding file")
os.Exit(1)
}
if err := file.Close(); err != nil {
store.Timestamps = append(store.Timestamps, Timestamp{current, next})
if _, err := file.Seek(0, 0); err != nil {
fmt.Println("Error seeking file")
os.Exit(1)
}
// Write to file
encoder := json.NewEncoder(file)
if err = encoder.Encode(store); err != nil {
fmt.Println("Error encoding file")
os.Exit(1)
}
if err = file.Close(); err != nil {
fmt.Println("Error closing file")
}
if time.Now().Unix() > info.Next {
return PageData{
Title: "Form page",
Message: "Already submmited form today, please wait until tomorrow",
ShowForm: false,
os.Exit(1)
}
}
return PageData{
Title: "Form page",
Message: "Please enter API key to submit form",
ShowForm: true,
}
func query() bool {
// Check if file exists
if file, err := os.Open(DataStore); err != nil {
fmt.Println("Error opening file, check permissions")
os.Exit(1)
} else {
// Decode file
decoder := json.NewDecoder(file)
store := Store{}
if err = decoder.Decode(&store); err != nil {
fmt.Println("Error decoding file")
os.Exit(1)
}
if err = file.Close(); err != nil {
fmt.Println("Error closing file")
os.Exit(1)
}
if len(store.Timestamps) == 0 {
return true
}
// Check if user has already submitted form today
current := time.Now().Unix()
// Get last timestamp
last := store.Timestamps[len(store.Timestamps)-1]
// If current time is greater than the next time the form can be submitted
if current > last.Next {
return true
}
}
return false
}
func index(w http.ResponseWriter, r *http.Request) {
tmpl := template.Must(template.ParseFiles("index.html"))
var data PageData
if r.Method == "GET" {
fmt.Println("GET request received")
data = checkFile()
unauthenticated := PageData{
Title: "Log in",
Message: "Please enter your username and password",
ShowLogin: true,
ShowInput: false,
}
if r.Method == "POST" {
authenticated := PageData{
Title: "View data",
Message: "Welcome back " + Username + ". Check in after the timeout",
ShowLogin: false,
ShowInput: true,
}
// Check for session cookie
cookie, err := r.Cookie("session")
if err != nil {
data = unauthenticated
} else {
// Parse cookie to int64
if session, err := strconv.ParseInt(cookie.Value, 10, 64); err != nil {
fmt.Println("Error parsing cookie")
data = unauthenticated
} else {
found := false
for _, uuid := range Authorised {
if uuid == session {
found = true
}
}
if found {
data = authenticated
} else {
// If cookie is not in Authorised list, remove it
data = unauthenticated
}
}
}
authenticated.ShowInput = query()
if err := tmpl.Execute(w, data); err != nil {
http.Error(w, "Error rendering template", http.StatusInternalServerError)
}
}
func post(w http.ResponseWriter, r *http.Request) {
fmt.Println("POST request received")
if err := r.ParseForm(); err != nil {
http.Error(w, "Error parsing form", http.StatusBadRequest)
return
}
if r.Form.Get("key") != os.Getenv("API_KEY") {
http.Error(w, "Invalid API key", http.StatusUnauthorized)
next := r.Form.Get("next")
if next, err := strconv.ParseInt(next, 10, 64); err != nil {
http.Error(w, "Invalid time", http.StatusBadRequest)
return
} else {
commit(next)
}
http.Redirect(w, r, "/", http.StatusSeeOther)
return
}
data = handlePost()
func login(w http.ResponseWriter, r *http.Request) {
fmt.Println("LOGIN request received")
if err := r.ParseForm(); err != nil {
http.Error(w, "Error parsing form", http.StatusBadRequest)
return
}
if err := tmpl.Execute(w, data); err != nil {
http.Error(w, "Error rendering template", http.StatusInternalServerError)
username := r.Form.Get("username")
password := r.Form.Get("password")
if username != os.Getenv("USERNAME") || password != os.Getenv("PASSWORD") {
http.Error(w, "Invalid username or password", http.StatusUnauthorized)
return
}
// Create session cookie
if session, err := rand.Int(rand.Reader, big.NewInt(math.MaxInt64)); err != nil {
http.Error(w, "Error creating session", http.StatusInternalServerError)
return
} else {
Authorised = append(Authorised, session.Int64())
cookie := http.Cookie{
Name: "session",
Value: session.String(),
Expires: time.Now().Add(24 * time.Hour),
}
http.SetCookie(w, &cookie)
http.Redirect(w, r, "/", http.StatusSeeOther)
return
}
}
func logout(w http.ResponseWriter, r *http.Request) {
fmt.Println("LOGOUT request received")
cookie := http.Cookie{
Name: "session",
Value: "",
Expires: time.Now().Add(-1 * time.Hour),
}
http.SetCookie(w, &cookie)
http.Redirect(w, r, "/", http.StatusSeeOther)
return
}