Mercurial Hosting > freedit

diff src/login.html.luan @ 54:260abd8f8565

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
login and register
author Franklin Schmidt <fschmidt@gmail.com>
date Sun, 27 Nov 2022 23:46:27 -0700
parents a1db5223ced1
children c57b84f461ae
line wrap: on
line diff
--- a/src/login.html.luan	Thu Nov 24 22:54:43 2022 -0700
+++ b/src/login.html.luan	Sun Nov 27 23:46:27 2022 -0700
@@ -1,56 +1,18 @@
 local Luan = require "luan:Luan.luan"
 local error = Luan.error
-local String = require "luan:String.luan"
-local trim = String.trim or error()
-local regex = String.regex or error()
 local Html = require "luan:Html.luan"
 local url_encode = Html.url_encode or error()
 local Io = require "luan:Io.luan"
-local output_of = Io.output_of or error()
 local Http = require "luan:http/Http.luan"
 local Shared = require "site:/lib/Shared.luan"
 local head = Shared.head or error()
 local header = Shared.header or error()
 local footer = Shared.footer or error()
-local base_url = Shared.base_url or error()
-local call_mail_api = Shared.call_mail_api or error()
 local Forum = require "site:/lib/Forum.luan"
 local forum_title = Forum.title or error()
 local User = require "site:/lib/User.luan"
-local Db = require "site:/lib/Db.luan"
-local run_in_transaction = Db.run_in_transaction or error()
 
 
-local name_regex = regex "^[a-zA-Z0-9_-]+$"
-
-local function get_user(email,password)
-	local user = User.get_by_email(email)
-	user or error "email not found"
-	user.password == password or error "wrong password"
-	return user
-end
-
-local function login(user)
-	Http.response.set_persistent_cookie("user",user.name)
-	Http.response.set_persistent_cookie("password",user.password)
-	Http.request.cookies.user = user.name
-	Http.request.cookies.password = user.password
-end
-
-local function register_form(user,name,error_message)
-	if error_message ~= nil then %>
-			<p error>Error: <%= error_message %></p>
-<%	end %>
-			<form>
-				<input type="hidden" name="email" value="<%= user.email %>" >
-				<input type="hidden" name="password" value="<%= user.password %>" >
-				<label>User name for <%= user.email %></label>
-				<input type="text" name="name" value="<%= name or "" %>" autofocus required pattern="[a-zA-Z0-9_-]+">
-				<input type="submit" value="Register">
-			</form>
-<%
-end
-
 local function page(contents)
 	Io.stdout = Http.response.text_writer()
 %>
@@ -58,12 +20,17 @@
 <html>
 	<head>
 <%		head() %>
-		<title><%=forum_title%> - Login or Register</title>
+		<title><%=forum_title%> - Login</title>
+		<script>
+			function show(checkbox) {
+				document.querySelector('input[name="password"]').type = checkbox.checked ? 'text' : 'password';
+			}
+		</script>
 	</head>
 	<body>
 <%		header() %>
 		<div content>
-			<h1>Login or Register</h1>
+			<h1>Login</h1>
 <%
 			contents()
 %>
@@ -77,70 +44,44 @@
 return function()
 	local email = Http.request.parameters.email
 	local password = Http.request.parameters.password
-	local name = Http.request.parameters.name
-	if email == nil then
-		page(function()
+	local error_message = nil
+	if Http.request.method == "POST" then
+		local user = User.get_by_email(email)
+		if user == nil then
+			error_message = "email not found"
+		elseif user.password ~= password then
+			error_message = "wrong password"
+		end
+		if error_message == nil then
+			if user.name == nil then
+				Http.response.send_redirect("/set_name.html?email="..url_encode(email).."&password="..password)
+				return
+			end
+			user.login()
+			page(function()
 %>
-			<form>
-				<label>Email address</label>
-				<input type="email" name="email" autofocus required>
-				<input type="submit" value="Login or Register">
+				<p>You are now logged in.</p>
+<%
+			end)
+			return
+		end
+	end
+	page(function()
+		if error_message ~= nil then %>
+			<p error>Error: <%= error_message %></p>
+<%		end %>
+			<form action="login.html" method=post>
+				<p>
+					<label>Email address</label>
+					<input type="email" name="email" value="<%= email or "" %>" autofocus required>
+				</p>
+				<p>
+					<label>Password</label>
+					<input type="password" name="password" value="<%= password or "" %>">
+					<label clickable><input type=checkbox onclick="show(this)">Show</label>
+				</p>
+				<p><input type="submit" value="Login"></p>
 			</form>
 <%
-		end)
-	elseif password == nil then
-		local user = User.get_or_create_by_email(email)
-		local result = call_mail_api( "login_email", {
-			base_url = base_url()
-			from = forum_title.." <support@freedit.org>"
-			email = user.email
-			password = user.password
-		} )
-		result.okay or error(result.error)
-		page(function()
-%>
-			<p>We have sent you an email.  Please check your email to login or register.</p>
-<%
-		end)
-	elseif name == nil then
-		local user = get_user(email,password)
-		if user.name == nil then
-			page(function()
-				register_form(user)
-			end)
-		else
-			login(user)
-			page(function()
-%>
-			<p>You are now logged in.</p>
-<%
-			end)
-		end
-	else
-		name = trim(name)
-		name_regex.matches(name) or error "invalid name"
-		local error_message = nil
-		local user
-		run_in_transaction( function()
-			user = get_user(email,password)
-			if user.name ~= name and User.get_by_name(name) ~= nil then
-				error_message = "Name already in use"
-			else
-				user.name = name
-				user.save()
-			end
-		end )
-		if error_message ~= nil then
-			page(function()
-				register_form(user,name,error_message)
-			end)
-		else
-			login(user)
-			page(function()
-%>
-			<p>You are now registered.</p>
-<%
-			end)
-		end
-	end
+	end)
 end