Function AuthFallback

clientapi/routing/auth_fallback.go:102–180

AuthFallback implements GET and POST /auth/{authType}/fallback/web?session={sessionID}

(
	w http.ResponseWriter, req *http.Request, authType string,
	cfg *config.ClientAPI,
)

// AuthFallback implements GET and POST /auth/{authType}/fallback/web?session={sessionID}
func AuthFallback(
	w http.ResponseWriter, req *http.Request, authType string,
	cfg *config.ClientAPI,
) *util.JSONResponse {
	sessionID := req.URL.Query().Get("session")

	if sessionID == "" {
		return writeHTTPMessage(w, req,
			"Session ID not provided",
			http.StatusBadRequest,
		)
	}

	serveRecaptcha := func() {
		data := map[string]string{
			"myUrl":   req.URL.String(),
			"session": sessionID,
			"siteKey": cfg.RecaptchaPublicKey,
		}
		serveTemplate(w, recaptchaTemplate, data)
	}

	serveSuccess := func() {
		data := map[string]string{}
		serveTemplate(w, successTemplate, data)
	}

	if req.Method == http.MethodGet {
		// Handle Recaptcha
		if authType == authtypes.LoginTypeRecaptcha {
			if err := checkRecaptchaEnabled(cfg, w, req); err != nil {
				return err
			}

			serveRecaptcha()
			return nil
		}
		return &util.JSONResponse{
			Code: http.StatusNotFound,
			JSON: jsonerror.NotFound("Unknown auth stage type"),
		}
	} else if req.Method == http.MethodPost {
		// Handle Recaptcha
		if authType == authtypes.LoginTypeRecaptcha {
			if err := checkRecaptchaEnabled(cfg, w, req); err != nil {
				return err
			}

			clientIP := req.RemoteAddr
			err := req.ParseForm()
			if err != nil {
				util.GetLogger(req.Context()).WithError(err).Error("req.ParseForm failed")
				res := jsonerror.InternalServerError()
				return &res
			}

			response := req.Form.Get("g-recaptcha-response")
			if err := validateRecaptcha(cfg, response, clientIP); err != nil {