collinenlucy.nl/controller.go

package main

import (
	"database/sql"
	"encoding/base64"
	"fmt"
	"log"
	"net/http"
	"os"
	"strconv"
	"strings"
	"time"
)

var token string

type Handler struct {
	db   *sql.DB
	ntfy *Ntfy
}

func getStaticFile(relPath string, contentType string, w http.ResponseWriter) {
	file, err := os.ReadFile(relPath)
	if err != nil {
		w.WriteHeader(http.StatusInternalServerError)
		fmt.Fprintf(w, "%s", err.Error())
		return
	}

	w.Header().Add("Content-Type", contentType)
	w.WriteHeader(http.StatusOK)
	w.Write(file)
}

func SetupAuth() {
	var username string
	var password string
	for _, entry := range os.Environ() {
		split := strings.Split(entry, "=")
		switch split[0] {
		case "USERNAME":
			username = split[1]
		case "PASSWORD":
			password = split[1]
		}

		if username != "" && password != "" {
			break
		}
	}

	if username == "" || password == "" {
		log.Fatal("no authorization details")
	}

	sb := new(strings.Builder)
	encoder := base64.NewEncoder(base64.StdEncoding, sb)
	encoder.Write(fmt.Appendf(nil, "%s:%s", username, password))
	encoder.Close()

	token = sb.String()

	fmt.Println("auth ready")
}

func isAuthorized(r *http.Request) bool {
	auth := r.Header.Get("Authorization")

	if auth == "" {
		return false
	}

	return auth == token
}

func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
	fmt.Printf("%s - [%s] (%s) %s\n", time.Now().Format(time.RFC3339), r.RemoteAddr, r.Method, r.URL)

	switch true {
	case r.Method == "GET" && r.URL.Path == "/":
		getStaticFile("./client/index.html", "text/html", w)

	case r.Method == "GET" && r.URL.Path == "/rsvp":
		getStaticFile("./client/rsvp.html", "text/html", w)

	case r.Method == "GET" && r.URL.Path == "/rsvp_confirmed":
		getStaticFile("./client/rsvp_confirmed.html", "text/html", w)

	case r.Method == "GET" && r.URL.Path == "/index.js":
		getStaticFile("./client/index.js", "text/javascript", w)

	case r.Method == "GET" && r.URL.Path == "/rsvp.js":
		getStaticFile("./client/rsvp.js", "text/javascript", w)

	case r.Method == "GET" && r.URL.Path == "/style.css":
		getStaticFile("./client/style.css", "text/css", w)

	case r.Method == "GET" && r.URL.Path == "/api/rsvps":
		if !isAuthorized(r) {
			w.WriteHeader(http.StatusUnauthorized)
			return
		}

		rsvps, err := GetRsvps(h.db)
		if err != nil {
			w.WriteHeader(http.StatusInternalServerError)
			fmt.Fprintf(w, "%s", err.Error())
			return
		}

		w.WriteHeader(http.StatusOK)
		fmt.Fprintf(w, "%#v", rsvps)

	case r.Method == "POST" && r.URL.Path == "/api/rsvps":
		err := r.ParseForm()

		if err != nil {
			fmt.Println(err)
			w.WriteHeader(http.StatusBadRequest)
			return
		}

		attending := r.Form.Get("attending") == "true"
		partySize, err := strconv.ParseInt(r.Form.Get("party-size"), 10, 1)

		if err != nil {
			fmt.Println(err)
			w.WriteHeader(http.StatusBadRequest)
			return
		}

		partyMembers := make([]Member, partySize)
		for i := range partySize {
			name := r.Form.Get(fmt.Sprintf("name-%d", i))
			child := r.Form.Has(fmt.Sprintf("child-%d", i)) && r.Form.Get(fmt.Sprintf("child-%d", i)) == "true"
			dietaryPreferences := r.Form.Get(fmt.Sprintf("diet-%d", i))
			member := Member{
				Name:               name,
				Child:              child,
				DietaryPreferences: dietaryPreferences,
			}
			partyMembers[i] = member
		}

		rsvp := Rsvp{
			Attending:    attending,
			PartySize:    partySize,
			PartyMembers: partyMembers,
		}

		_, err = rsvp.CreateRsvp(h.db)

		if err != nil {
			fmt.Println(err)
			w.WriteHeader(http.StatusInternalServerError)
			return
		}

		if h.ntfy != nil {
			SendRsvpNotification(h.ntfy, &rsvp)
		}
		w.Header().Add("Location", "/rsvp_confirmed")
		w.WriteHeader(http.StatusSeeOther)
	default:
		w.WriteHeader(http.StatusNotFound)
	}
}