Method RegisterRoutes

pkg/account/server.go:100–151

(server *web.Server)

}

func (s *server) RegisterRoutes(server *web.Server) {
	csrfMiddleware := webmiddleware.CSRF(
		s.config.CSRFAuthKey,
		csrf.CookieName("_csrf"),
		csrf.FieldName("_csrf"),
		csrf.Path("/"),
	)
	router := server.PrefixWithRedirect(s.config.Mount).Subrouter()
	router.Use(
		func(next http.Handler) http.Handler {
			return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
				r, nonce := webui.WithNonce(r)
				cspString := s.generateCSP(s.configFromContext(r.Context()), nonce)
				w.Header().Set("Content-Security-Policy", cspString)
				next.ServeHTTP(w, r)
			})
		},
		ratelimit.HTTPMiddleware(s.c.RateLimiter(), "http:account"),
		func(next http.Handler) http.Handler {
			return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
				config := s.configFromContext(r.Context())
				r = webui.WithTemplateData(r, config.UI.TemplateData)
				frontendConfig := config.UI.FrontendConfig
				frontendConfig.Language = config.UI.TemplateData.Language
				r = webui.WithAppConfig(r, struct {
					oauth.FrontendConfig
				}{
					FrontendConfig: frontendConfig,
				})
				next.ServeHTTP(w, r)
			})
		},
		webhandlers.WithErrorHandlers(map[string]http.Handler{
			"text/html": webui.Template,
		}),
		mux.MiddlewareFunc(csrfMiddleware),
	)

	logoutHandler := s.requireLogin(http.HandlerFunc(s.Logout))
	currentUserHandler := s.requireLogin(http.HandlerFunc(s.CurrentUser))
	api := router.NewRoute().PathPrefix("/api").Subrouter()
	api.Path("/auth/login").HandlerFunc(s.Login).Methods(http.MethodPost)
	api.Path("/auth/token-login").HandlerFunc(s.TokenLogin).Methods(http.MethodPost)
	api.Path("/auth/logout").Handler(logoutHandler).Methods(http.MethodPost)
	api.Path("/me").Handler(currentUserHandler).Methods(http.MethodGet)

	loginHandler := s.redirectToNext(webui.Template)
	page := router.NewRoute().Subrouter()
	page.Path("/login").Handler(loginHandler).Methods(http.MethodGet)
	page.Path("/token-login").Handler(loginHandler).Methods(http.MethodGet)
	page.NewRoute().Handler(webui.Template)
}