diff src/login.html.luan @ 3:fc3ee39d7764

login
author Franklin Schmidt <fschmidt@gmail.com>
date Sun, 19 Jun 2022 20:47:31 -0600
parents
children a17e400ddaa1
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/src/login.html.luan	Sun Jun 19 20:47:31 2022 -0600
@@ -0,0 +1,135 @@
+local Luan = require "luan:Luan.luan"
+local error = Luan.error
+local String = require "luan:String.luan"
+local trim = String.trim or error()
+local Html = require "luan:Html.luan"
+local url_encode = Html.url_encode or error()
+local Io = require "luan:Io.luan"
+local Http = require "luan:http/Http.luan"
+local Shared = require "site:/lib/Shared.luan"
+local head = Shared.head or error()
+local header = Shared.header or error()
+local footer = Shared.footer or error()
+local base_url = Shared.base_url or error()
+local Forum = require "site:/lib/Forum.luan"
+local forum_title = Forum.title or error()
+local User = require "site:/lib/User.luan"
+local Db = require "site:/lib/Db.luan"
+local run_in_transaction = Db.run_in_transaction or error()
+
+
+local function get_user(email,password)
+	local user = User.get_by_email(email)
+	user or error "email not found"
+	user.password == password or error "wrong password"
+	return user
+end
+
+local function login(user)
+	Http.response.set_persistent_cookie("user",user.name)
+	Http.response.set_persistent_cookie("password",user.password)
+	Http.request.cookies.user = user.name
+	Http.request.cookies.password = user.password
+end
+
+local function register_form(user,name,error_message)
+	if error_message ~= nil then %>
+			<p error>Error: <%= error_message %></p>
+<%	end %>
+			<form>
+				<input type="hidden" name="email" value="<%= user.email %>" >
+				<input type="hidden" name="password" value="<%= user.password %>" >
+				<label>User name for <%= user.email %></label>
+				<input type="text" name="name" value="<%= name or "" %>" autofocus required>
+				<input type="submit" value="Register">
+			</form>
+<%
+end
+
+local function page(contents)
+	Io.stdout = Http.response.text_writer()
+%>
+<!doctype html>
+<html>
+	<head>
+<%		head() %>
+		<title><%=forum_title%> - Login or Register</title>
+	</head>
+	<body>
+<%		header() %>
+		<div content>
+			<h1>Login or Register</h1>
+<%
+			contents()
+%>
+		</div>
+<%		footer() %>
+	</body>
+</html>
+<%
+end
+
+return function()
+	local email = Http.request.parameters.email
+	local password = Http.request.parameters.password
+	local name = Http.request.parameters.name
+	if email == nil then
+		page(function()
+%>
+			<form>
+				<label>Email address</label>
+				<input type="email" name="email" autofocus required>
+				<input type="submit" value="Login or Register">
+			</form>
+<%
+		end)
+	elseif password == nil then
+		local user = User.get_or_create_by_email(email)
+		page(function()
+%>
+			<p>We have sent you an email.  Please check your email to login or register.</p>
+			<p>hack - <a href="<%=base_url()%>/login.html?email=<%=url_encode(email)%>&password=<%=user.password%>">link</a></p>
+<%
+		end)
+	elseif name == nil then
+		local user = get_user(email,password)
+		if user.name == nil then
+			page(function()
+				register_form(user)
+			end)
+		else
+			login(user)
+			page(function()
+%>
+			<p>You are now logged in.</p>
+<%
+			end)
+		end
+	else
+		name = trim(name)
+		#name > 0 or error "empty name"
+		local error_message = nil
+		local user
+		run_in_transaction( function()
+			user = get_user(email,password)
+			if user.name ~= name and User.get_by_name(name) ~= nil then
+				error_message = "Name already in use"
+			else
+				user.name = name
+				user.save()
+			end
+		end )
+		if error_message ~= nil then
+			page(function()
+				register_form(user,name,error_message)
+			end)
+		else
+			login(user)
+			page(function()
+%>
+			<p>You are now registered.</p>
+<%
+			end)
+		end
+	end
+end