aceberg/miniboard

package auth

import (
    "net/http"
    "time"
)

// Auth - main auth func
func Auth(next http.HandlerFunc, conf *Conf) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {

        if !conf.Auth || conf.User == "" || conf.Password == "" {
            next.ServeHTTP(w, r)
            return
        }

        sessionToken := getTokenFromCookie(r)

        userSession, exists := allSessions[sessionToken]
        if !exists {
            http.Redirect(w, r, "/login/", 302)
            return
        }
        if userSession.Before(time.Now()) {
            delete(allSessions, sessionToken)
            http.Redirect(w, r, "/login/", 302)
            return
        }

        userSession = time.Now().Add(conf.Expire)
        allSessions[sessionToken] = userSession

        next.ServeHTTP(w, r)
    }
}