Function loginHandler

src/webInterface.cpp:461–483

}

esp_err_t loginHandler(httpd_req_t *req) {
    WebParamMap params = readParams(req);
    if (params.has("username") && params.has("password") && params.get("username") == wui_usr &&
        params.get("password") == wui_pwd) {
        String token = generateToken();
        sessions.clear();
        sessions[token] = launcherMillis();
        saveSessionToken(token);
        sessionTokenLoaded = true;
        persistedSessionToken = token;

        // Keep cookie string alive until after httpd_resp_send — httpd_resp_set_hdr
        // stores raw pointers without copying, so a temporary String would dangle.
        String cookieHeader = "ESP32SESSION=" + token + "; Path=/; HttpOnly";
        httpd_resp_set_status(req, "302 Found");
        httpd_resp_set_hdr(req, "Location", "/");
        httpd_resp_set_hdr(req, "Set-Cookie", cookieHeader.c_str());
        httpd_resp_send(req, nullptr, 0);
        return ESP_OK;
    }
    redirectTo(req, "/?failed");
    return ESP_OK;
}

esp_err_t logoutHandler(httpd_req_t *req) {
    ensurePersistedSessionLoaded();