package api import ( "time" "net/http" "demodesk/neko/internal/utils" "demodesk/neko/internal/types" "demodesk/neko/internal/http/auth" ) type SessionLoginPayload struct { ID string `json:"id"` Secret string `json:"secret"` } type SessionWhoamiPayload struct { ID string `json:"id"` Profile types.MemberProfile `json:"profile"` State types.MemberState `json:"state"` } func (api *ApiManagerCtx) Login(w http.ResponseWriter, r *http.Request) { data := &SessionLoginPayload{} if !utils.HttpJsonRequest(w, r, data) { return } session, err := api.sessions.Authenticate(data.ID, data.Secret) if err != nil { utils.HttpUnauthorized(w, err) return } http.SetCookie(w, &http.Cookie{ Name: "neko-id", Value: session.ID(), Expires: time.Now().Add(365 * 24 * time.Hour), HttpOnly: false, }) http.SetCookie(w, &http.Cookie{ Name: "neko-secret", Value: data.Secret, Expires: time.Now().Add(365 * 24 * time.Hour), HttpOnly: true, }) utils.HttpSuccess(w, SessionWhoamiPayload{ ID: session.ID(), Profile: session.GetProfile(), State: session.GetState(), }) } func (api *ApiManagerCtx) Logout(w http.ResponseWriter, r *http.Request) { http.SetCookie(w, &http.Cookie{ Name: "neko-id", Value: "", Expires: time.Unix(0, 0), HttpOnly: false, }) http.SetCookie(w, &http.Cookie{ Name: "neko-secret", Value: "", Expires: time.Unix(0, 0), HttpOnly: true, }) utils.HttpSuccess(w, true) } func (api *ApiManagerCtx) Whoami(w http.ResponseWriter, r *http.Request) { session := auth.GetSession(r) utils.HttpSuccess(w, SessionWhoamiPayload{ ID: session.ID(), Profile: session.GetProfile(), State: session.GetState(), }) }