Method AdminApper

handle.go:214–249

AdminApper handles requests on /admin routes that require an Apper.

(f userApperHandlerFunc)

// AdminApper handles requests on /admin routes that require an Apper.
func (h *Handler) AdminApper(f userApperHandlerFunc) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		h.handleHTTPError(w, r, func() error {
			var status int
			start := time.Now()

			defer func() {
				if e := recover(); e != nil {
					log.Error("%s: %s", e, debug.Stack())
					h.errors.InternalServerError.ExecuteTemplate(w, "base", pageForReq(h.app.App(), r))
					status = http.StatusInternalServerError
				}

				log.Info(h.app.ReqLog(r, status, time.Since(start)))
			}()

			u := getUserSession(h.app.App(), r)
			if u == nil || !u.IsAdmin() {
				err := impart.HTTPError{http.StatusNotFound, ""}
				status = err.Status
				return err
			}

			err := f(h.app, u, w, r)
			if err == nil {
				status = http.StatusOK
			} else if err, ok := err.(impart.HTTPError); ok {
				status = err.Status
			} else {
				status = http.StatusInternalServerError
			}

			return err
		}())
	}
}

func apiAuth(app *App, r *http.Request) (*User, error) {
	// Authorize user from Authorization header