working on account registration and more

pkg/api/api_login.go

@@ -5,7 +5,6 @@ import "github.com/gin-gonic/gin"
 func init() {
 	addRoutes(func(self *HttpServer) {
 		self.router.GET("/login/*_", self.index)
-		self.router.GET("/register/*_", self.index)
 		self.router.POST("/login", self.loginPost)
 		self.router.POST("/logout", self.logoutPost)
 	})
@@ -20,18 +19,28 @@ type loginJsonModel struct {
 func (self *HttpServer) loginPost(c *gin.Context) {
 	var loginModel loginJsonModel
 
-	if c.EnsureBody(&loginModel) {
-		if loginModel.Email == "manu" && loginModel.Password == "123" {
-
-			session, _ := sessionStore.Get(c.Request, "grafana-session")
-			session.Values["login"] = true
-			session.Save(c.Request, c.Writer)
-
-			c.JSON(200, gin.H{"status": "you are logged in"})
-		} else {
-			c.JSON(401, gin.H{"status": "unauthorized"})
-		}
+	if !c.EnsureBody(&loginModel) {
+		c.JSON(400, gin.H{"status": "bad request"})
+		return
 	}
+
+	account, err := self.store.GetUserAccountLogin(loginModel.Email)
+	if err != nil {
+		c.JSON(400, gin.H{"status": "some error"})
+	}
+
+	if loginModel.Password != account.Password {
+		c.JSON(401, gin.H{"status": "unauthorized"})
+		return
+	}
+
+	session, _ := sessionStore.Get(c.Request, "grafana-session")
+	session.Values["login"] = true
+	session.Values["accountId"] = account.DatabaseId
+
+	session.Save(c.Request, c.Writer)
+
+	c.JSON(200, gin.H{"status": "you are logged in"})
 }
 
 func (self *HttpServer) logoutPost(c *gin.Context) {
@@ -42,15 +51,18 @@ func (self *HttpServer) logoutPost(c *gin.Context) {
 	c.JSON(200, gin.H{"status": "logged out"})
 }
 
-func (self *HttpServer) authMiddleware() gin.HandlerFunc {
+func (self *HttpServer) auth() gin.HandlerFunc {
 	return func(c *gin.Context) {
 		session, _ := sessionStore.Get(c.Request, "grafana-session")
 
 		if c.Request.URL.Path != "/login" && session.Values["login"] == nil {
 			c.Writer.Header().Set("Location", "/login")
 			c.Abort(302)
+			return
 		}
 
+		c.Set("accountId", session.Values["accountId"])
+
 		session.Save(c.Request, c.Writer)
 	}
 }