package routes import ( "fmt" "goweb/context" "goweb/controller" "goweb/ent" "goweb/ent/user" "goweb/msg" "github.com/labstack/echo/v4" ) type ( Login struct { controller.Controller } LoginForm struct { Email string `form:"email" validate:"required,email" label:"Email address"` Password string `form:"password" validate:"required" label:"Password"` } ) func (l *Login) Get(c echo.Context) error { p := controller.NewPage(c) p.Layout = "auth" p.Name = "login" p.Title = "Log in" p.Data = LoginForm{} if form := c.Get(context.FormKey); form != nil { p.Data = form.(LoginForm) } return l.RenderPage(c, p) } func (l *Login) Post(c echo.Context) error { fail := func(message string, err error) error { c.Logger().Errorf("%s: %v", message, err) msg.Danger(c, "An error occurred. Please try again.") return l.Get(c) } // Parse the form values form := new(LoginForm) if err := c.Bind(form); err != nil { return fail("unable to parse login form", err) } c.Set(context.FormKey, *form) // Validate the form if err := c.Validate(form); err != nil { l.SetValidationErrorMessages(c, err, form) return l.Get(c) } // Attempt to load the user u, err := l.Container.ORM.User. Query(). Where(user.Email(form.Email)). Only(c.Request().Context()) switch err.(type) { case *ent.NotFoundError: msg.Danger(c, "Invalid credentials. Please try again.") return l.Get(c) case nil: default: return fail("error querying user during login", err) } // Check if the password is correct err = l.Container.Auth.CheckPassword(form.Password, u.Password) if err != nil { msg.Danger(c, "Invalid credentials. Please try again.") return l.Get(c) } // Log the user in err = l.Container.Auth.Login(c, u.ID) if err != nil { return fail("unable to log in user", err) } msg.Success(c, fmt.Sprintf("Welcome back, %s. You are now logged in.", u.Name)) return l.Redirect(c, "home") }