Method getUserFromSessionRequestBody

rest/session_api.go:87–116

()

}

func (h *handler) getUserFromSessionRequestBody() (auth.User, error) {

	var params struct {
		Name     string `json:"name"`
		Password string `json:"password"`
	}
	err := h.readJSONInto(&params)
	if err != nil {
		return nil, err
	}

	var user auth.User
	user, err = h.db.Authenticator(h.ctx()).GetUser(params.Name)
	if err != nil {
		return nil, err
	}

	if user == nil {
		base.InfofCtx(h.ctx(), base.KeyAuth, "Couldn't create session for user %q: not found", base.UD(params.Name))
		return nil, nil
	}

	authenticated, reason := user.AuthenticateWithReason(params.Password)
	if !authenticated {
		base.InfofCtx(h.ctx(), base.KeyAuth, "Couldn't create session for user %q: %s", base.UD(params.Name), reason)
		return nil, nil
	}

	return user, nil
}

// DELETE /_session logs out the current session
func (h *handler) handleSessionDELETE() error {