Method AppHandler

internal/http_handlers/app.go:21–78

AppHandler is the handler for the /app route

()

// AppHandler is the handler for the /app route
func (h *httpProvider) AppHandler() gin.HandlerFunc {
	log := h.Log.With().Str("func", "AppHandler").Logger()
	return func(c *gin.Context) {
		hostname := parsers.GetHost(c)
		if !h.Config.EnableLoginPage {
			log.Debug().Msg("Login page is disabled")
			c.JSON(400, gin.H{"error": "login page is not enabled"})
			return
		}

		redirectURI := strings.TrimSpace(c.Query("redirect_uri"))
		state := strings.TrimSpace(c.Query("state"))
		scopeString := strings.TrimSpace(c.Query("scope"))

		var scope []string
		if scopeString == "" {
			scope = []string{"openid", "profile", "email"}
		} else {
			scope = strings.Split(scopeString, " ")
		}

		if redirectURI == "" {
			redirectURI = hostname + "/app"
		} else {
			// validate redirect url with allowed origins
			if !validators.IsValidRedirectURI(redirectURI, h.Config.AllowedOrigins, hostname) {
				log.Debug().Msg("Invalid redirect url")
				c.JSON(400, gin.H{"error": "invalid redirect url"})
				return
			}
		}

		// debug the request state
		if pusher := c.Writer.Pusher(); pusher != nil {
			// use pusher.Push() to do server push
			if err := pusher.Push("/app/build/bundle.js", nil); err != nil {
				log.Debug().Err(err).Msg("Failed to push bundle.js")
			}
		}

		orgName := h.Config.OrganizationName
		orgLogo := h.Config.OrganizationLogo
		// Always revalidate the SPA shell so cached pointers to obsolete
		// content-hashed chunks don't survive a deploy.
		c.Header("Cache-Control", "no-cache, must-revalidate")
		c.HTML(http.StatusOK, "app.tmpl", gin.H{
			"data": map[string]interface{}{
				"authorizerURL":    hostname,
				"redirectURL":      redirectURI,
				"scope":            strings.Join(scope, " "),
				"state":            state,
				"organizationName": orgName,
				"organizationLogo": orgLogo,
				"clientId":         h.Config.ClientID,
			},
		})
	}
}