|
3
|
1 local Luan = require "luan:Luan.luan"
|
|
|
2 local error = Luan.error
|
|
|
3 local String = require "luan:String.luan"
|
|
|
4 local trim = String.trim or error()
|
|
14
|
5 local matches = String.matches or error()
|
|
3
|
6 local Html = require "luan:Html.luan"
|
|
|
7 local url_encode = Html.url_encode or error()
|
|
|
8 local Io = require "luan:Io.luan"
|
|
4
|
9 local output_of = Io.output_of or error()
|
|
3
|
10 local Http = require "luan:http/Http.luan"
|
|
|
11 local Shared = require "site:/lib/Shared.luan"
|
|
|
12 local head = Shared.head or error()
|
|
|
13 local header = Shared.header or error()
|
|
|
14 local footer = Shared.footer or error()
|
|
|
15 local base_url = Shared.base_url or error()
|
|
6
|
16 local call_mail_api = Shared.call_mail_api or error()
|
|
3
|
17 local Forum = require "site:/lib/Forum.luan"
|
|
|
18 local forum_title = Forum.title or error()
|
|
|
19 local User = require "site:/lib/User.luan"
|
|
|
20 local Db = require "site:/lib/Db.luan"
|
|
|
21 local run_in_transaction = Db.run_in_transaction or error()
|
|
|
22
|
|
|
23
|
|
|
24 local function get_user(email,password)
|
|
|
25 local user = User.get_by_email(email)
|
|
|
26 user or error "email not found"
|
|
|
27 user.password == password or error "wrong password"
|
|
|
28 return user
|
|
|
29 end
|
|
|
30
|
|
|
31 local function login(user)
|
|
|
32 Http.response.set_persistent_cookie("user",user.name)
|
|
|
33 Http.response.set_persistent_cookie("password",user.password)
|
|
|
34 Http.request.cookies.user = user.name
|
|
|
35 Http.request.cookies.password = user.password
|
|
|
36 end
|
|
|
37
|
|
|
38 local function register_form(user,name,error_message)
|
|
|
39 if error_message ~= nil then %>
|
|
|
40 <p error>Error: <%= error_message %></p>
|
|
|
41 <% end %>
|
|
|
42 <form>
|
|
|
43 <input type="hidden" name="email" value="<%= user.email %>" >
|
|
|
44 <input type="hidden" name="password" value="<%= user.password %>" >
|
|
|
45 <label>User name for <%= user.email %></label>
|
|
14
|
46 <input type="text" name="name" value="<%= name or "" %>" autofocus required pattern="[a-zA-Z0-9_-]+">
|
|
3
|
47 <input type="submit" value="Register">
|
|
|
48 </form>
|
|
|
49 <%
|
|
|
50 end
|
|
|
51
|
|
|
52 local function page(contents)
|
|
|
53 Io.stdout = Http.response.text_writer()
|
|
|
54 %>
|
|
|
55 <!doctype html>
|
|
|
56 <html>
|
|
|
57 <head>
|
|
|
58 <% head() %>
|
|
|
59 <title><%=forum_title%> - Login or Register</title>
|
|
|
60 </head>
|
|
|
61 <body>
|
|
|
62 <% header() %>
|
|
|
63 <div content>
|
|
|
64 <h1>Login or Register</h1>
|
|
|
65 <%
|
|
|
66 contents()
|
|
|
67 %>
|
|
|
68 </div>
|
|
|
69 <% footer() %>
|
|
|
70 </body>
|
|
|
71 </html>
|
|
|
72 <%
|
|
|
73 end
|
|
|
74
|
|
|
75 return function()
|
|
|
76 local email = Http.request.parameters.email
|
|
|
77 local password = Http.request.parameters.password
|
|
|
78 local name = Http.request.parameters.name
|
|
|
79 if email == nil then
|
|
|
80 page(function()
|
|
|
81 %>
|
|
|
82 <form>
|
|
|
83 <label>Email address</label>
|
|
|
84 <input type="email" name="email" autofocus required>
|
|
|
85 <input type="submit" value="Login or Register">
|
|
|
86 </form>
|
|
|
87 <%
|
|
|
88 end)
|
|
|
89 elseif password == nil then
|
|
|
90 local user = User.get_or_create_by_email(email)
|
|
6
|
91 local result = call_mail_api( "login_email", {
|
|
|
92 base_url = base_url()
|
|
|
93 from = forum_title.." <support@freedit.org>"
|
|
|
94 email = user.email
|
|
|
95 password = user.password
|
|
|
96 } )
|
|
|
97 result.okay or error(result.error)
|
|
3
|
98 page(function()
|
|
|
99 %>
|
|
|
100 <p>We have sent you an email. Please check your email to login or register.</p>
|
|
|
101 <%
|
|
|
102 end)
|
|
|
103 elseif name == nil then
|
|
|
104 local user = get_user(email,password)
|
|
|
105 if user.name == nil then
|
|
|
106 page(function()
|
|
|
107 register_form(user)
|
|
|
108 end)
|
|
|
109 else
|
|
|
110 login(user)
|
|
|
111 page(function()
|
|
|
112 %>
|
|
|
113 <p>You are now logged in.</p>
|
|
|
114 <%
|
|
|
115 end)
|
|
|
116 end
|
|
|
117 else
|
|
|
118 name = trim(name)
|
|
14
|
119 matches( name, "^[a-zA-Z0-9_-]+$" ) or error "invalid name"
|
|
3
|
120 local error_message = nil
|
|
|
121 local user
|
|
|
122 run_in_transaction( function()
|
|
|
123 user = get_user(email,password)
|
|
|
124 if user.name ~= name and User.get_by_name(name) ~= nil then
|
|
|
125 error_message = "Name already in use"
|
|
|
126 else
|
|
|
127 user.name = name
|
|
|
128 user.save()
|
|
|
129 end
|
|
|
130 end )
|
|
|
131 if error_message ~= nil then
|
|
|
132 page(function()
|
|
|
133 register_form(user,name,error_message)
|
|
|
134 end)
|
|
|
135 else
|
|
|
136 login(user)
|
|
|
137 page(function()
|
|
|
138 %>
|
|
|
139 <p>You are now registered.</p>
|
|
|
140 <%
|
|
|
141 end)
|
|
|
142 end
|
|
|
143 end
|
|
|
144 end
|
