Implement login

src/main.rs

@@ -23,6 +23,12 @@ struct Post {
     date: String,
 }
 
+#[derive(Debug, Serialize, Deserialize)]
+struct User {
+    username: String,
+    password: String,
+}
+
 impl Post {
     fn save(&mut self) -> std::io::Result<()> {
         let mut path: PathBuf = get_posts_directory()?;
@@ -99,25 +105,72 @@ async fn main() -> std::io::Result<()> {
         Ok(res)
     }));
 
-    app.at("/").get(|_| async {
+    app.with(tide::sessions::SessionMiddleware::new(
+        tide::sessions::MemoryStore::new(),
+        std::env::var("TIDE_SECRET")
+            .expect(
+                "Please provide a TIDE_SECRET value of at \
+                      least 32 bytes in order to run this example",
+            )
+            .as_bytes(),
+    ));
+
+    app.at("/").get(|req: tide::Request<()>| async move {
         let tera = Tera::new("templates/**/*.html")?;
         let posts = read_all_posts().await?;
         let mut context = Context::new();
         context.insert("posts", &posts);
+        let logged_in: bool = req.session().get("logged_in").unwrap_or(false);
+        context.insert("logged_in", &logged_in);
         let html = tera.render("index.html", &context)?;
         Ok(Body::from_string(html))
     });
 
     app.at("/posts")
         .post(|mut req: tide::Request<()>| async move {
-            let mut post: Post = req.body_form().await?;
-            post.id = Uuid::new_v4().to_string();
-            post.date = Local::now().date().naive_local().to_string();
-            post.body = post.body.trim().to_owned();
-            post.save()?;
-            Ok(tide::Redirect::new("/"))
+            let logged_in: bool = req.session().get("logged_in").unwrap_or(false);
+            if !logged_in {
+                Ok(tide::Redirect::new("/login"))
+            } else {
+                let mut post: Post = req.body_form().await?;
+                post.id = Uuid::new_v4().to_string();
+                post.date = Local::now().date().naive_local().to_string();
+                post.body = post.body.trim().to_owned();
+                post.save()?;
+                Ok(tide::Redirect::new("/"))
+            }
         });
 
+    app.at("/login").get(|req: tide::Request<()>| async move {
+        let tera = Tera::new("templates/**/*.html")?;
+        let mut context = Context::new();
+        let logged_in: bool = req.session().get("logged_in").unwrap_or(false);
+        context.insert("logged_in", &logged_in);
+        let html = tera.render("login.html", &context)?;
+        Ok(Body::from_string(html))
+    }).post(|mut req: tide::Request<()>| async move {
+        let logged_in: bool = req.session().get("logged_in").unwrap_or(false);
+        if logged_in {
+            return Ok(tide::Redirect::new("/"));
+        }
+
+        let username = env::var("ADMIN_USERNAME")?;
+        let password = env::var("ADMIN_PASSWORD")?;
+        let user: User = req.body_form().await?;
+        if user.username == username && user.password == password {
+            req.session_mut().insert("logged_in", true)?;
+            Ok(tide::Redirect::new("/"))
+        } else {
+            Ok(tide::Redirect::new("/login"))
+        }
+    });
+
+    app.at("/logout").get(|mut req: tide::Request<()>| async move {
+        req.session_mut().remove("logged_in");
+        req.session_mut().insert("logged_in", false)?;
+        Ok(tide::Redirect::new("/"))
+    });
+
     app.listen("127.0.0.1:8080").await?;
 
     Ok(())

templates/index.html

@@ -1,20 +1,22 @@
 {% extends "layout.html" %} {% block content %}
-<h1 class="heading">Admin</h1>
-<form class="form" method="POST" action="/posts">
-  <input type="hidden" name="id" />
-  <input type="hidden" name="date" />
-  <div class="form__field">
-    <label for="title" class="form__label">Title</label>
-    <input class="form__text-field" type="text" name="title" required />
-  </div>
-  <div class="form__field">
-    <label for="body" class="form__label">Body</label>
-    <textarea class="form__textarea" name="body" required></textarea>
-  </div>
-  <div class="form__field">
-    <input class="form__button" type="submit" value="Post" />
-  </div>
-</form>
+{% if logged_in %}
+  <h1 class="heading">New Post</h1>
+  <form class="form" method="POST" action="/posts">
+    <input type="hidden" name="id" />
+    <input type="hidden" name="date" />
+    <div class="form__field">
+      <label for="title" class="form__label">Title</label>
+      <input class="form__text-field" type="text" name="title" required />
+    </div>
+    <div class="form__field">
+      <label for="body" class="form__label">Body</label>
+      <textarea class="form__textarea" name="body" required></textarea>
+    </div>
+    <div class="form__field">
+      <input class="form__button" type="submit" value="Post" />
+    </div>
+  </form>
+{% endif %}
 
 <div class="posts">
   {% for post in posts %}

templates/layout.html

@@ -18,6 +18,15 @@
         font-size: 12px;
       }
 
+      a {
+        color: #383e37;
+      }
+
+      a:hover {
+        text-decoration: none;
+      }
+
+      .header,
       .container {
         margin: auto;
         max-width: 800px;
@@ -93,6 +102,11 @@
     </style>
   </head>
   <body>
+    <header class="header">
+      {% if logged_in %}
+        <a href="/logout">logout</a>
+      {% endif %}
+    </header>
     <div class="container">
       {% block content %} {% endblock %}
     </div>

templates/login.html

@@ -0,0 +1,22 @@
+{% extends "layout.html" %} {% block content %}
+<h1 class="heading">Login</h1>
+<form class="form" method="POST" action="/login">
+  <div class="form__field">
+    <label for="username" class="form__label">Username</label>
+    <input class="form__text-field" type="text" name="username" required />
+  </div>
+  <div class="form__field">
+    <label for="password" class="form__label">Password</label>
+    <input class="form__text-field" type="password" name="password" required />
+  </div>
+  {% if error %}
+    <div class="error">
+      <h1 class="error__heading">Error:</h1>
+      <p class="error__message">{{ error }}</p>
+    </div>
+  {% endif %}
+  <div class="form__field">
+    <input class="form__button" type="submit" value="Login" />
+  </div>
+</form>
+{% endblock %}