sessions_controller.rs

use rocket::State;
use rocket::form::Form;
use rocket::http::CookieJar;
use rocket::response::content::RawHtml;
use rocket::response::{Redirect, Responder};

use crate::Config;
use crate::DbConn;
use crate::controllers::pages_controller::rocket_uri_macro_home_page;
use crate::ephemeral::session::{
	SessionCookie, UserSession, stored_redirect_or,
};
use crate::errors::{Either, Result, ZauthError};
use crate::models::session::Session;
use crate::models::user::User;

#[get("/login")]
pub fn new_session<'r>(
	// from headers
	cookies: &CookieJar,
	session: Option<UserSession>,
) -> Either<Redirect, impl Responder<'r, 'static> + use<'r>> {
	match session {
		None => Either::Right(RawHtml(template!("session/login.html", {
			error: Option<String> = None,
		}))),
		_ => Either::Left(stored_redirect_or(cookies, uri!(home_page))),
	}
}

#[get("/logout")]
pub fn delete_session<'r>(
	// from headers
	session: UserSession,
) -> impl Responder<'r, 'static> {
	RawHtml(template!("session/logout.html", {
		current_user: User = session.user,
	}))
}

#[derive(Debug, FromForm)]
pub struct LoginFormData {
	username: String,
	password: String,
}

#[post("/login", data = "<form>")]
pub async fn create_session<'r>(
	// from body
	form: Form<LoginFormData>,
	// from headers
	cookies: &'r CookieJar<'_>,
	// injected
	config: &'r State<Config>,
	db: DbConn,
) -> Result<Either<Redirect, impl Responder<'r, 'static> + use<'r>>> {
	let form = form.into_inner();
	match User::find_and_authenticate(form.username, form.password, &db).await {
		Err(ZauthError::LoginError(login_error)) => {
			Ok(Either::Right(RawHtml(template!("session/login.html", {
				error: Option<String> = Some(login_error.to_string()),
			}))))
		},
		Ok(user) => {
			let session =
				Session::create(&user, config.user_session_duration(), &db)
					.await?;
			SessionCookie::new(session).login(cookies);
			user.update_last_login(&db).await?;
			Ok(Either::Left(stored_redirect_or(cookies, uri!(home_page))))
		},
		Err(err) => Err(err),
	}
}

#[post("/logout")]
pub async fn destroy_session(
	// from headers
	cookies: &CookieJar<'_>,
	session: UserSession,
	// injected
	db: DbConn,
) -> Result<Redirect> {
	session.destroy(cookies, &db).await?;
	Ok(Redirect::to("/"))
}