dispatch/server/auth.go

package server

import (
	"log"
	"net/http"

	"github.com/khlieng/dispatch/pkg/session"
	"github.com/khlieng/dispatch/storage"
)

func (d *Dispatch) handleAuth(w http.ResponseWriter, r *http.Request, createUser bool) *State {
	var state *State

	cookie, err := r.Cookie(session.CookieName)
	if err != nil {
		if createUser {
			state, err = d.newUser(w, r)
			if err != nil {
				log.Println(err)
			}
		}
	} else {
		session := d.states.getSession(cookie.Value)
		if session != nil {
			key := session.Key()
			newKey, expired, err := session.Refresh()
			if err != nil {
				return nil
			}

			if !expired {
				state = d.states.get(session.UserID)
				if newKey != "" {
					d.states.setSession(session)
					d.states.deleteSession(key)
					session.SetCookie(w, r)
				}
			}
		}

		if state != nil {
			log.Println(r.RemoteAddr, "[Auth] GET", r.URL.Path, "| Valid token | User ID:", state.user.ID)
		} else if createUser {
			state, err = d.newUser(w, r)
			if err != nil {
				log.Println(err)
			}
		}
	}

	return state
}

func (d *Dispatch) newUser(w http.ResponseWriter, r *http.Request) (*State, error) {
	user, err := storage.NewUser(d.Store)
	if err != nil {
		return nil, err
	}

	messageStore, err := d.GetMessageStore(user)
	if err != nil {
		return nil, err
	}
	user.SetMessageStore(messageStore)

	search, err := d.GetMessageSearchProvider(user)
	if err != nil {
		return nil, err
	}
	user.SetMessageSearchProvider(search)

	log.Println(r.RemoteAddr, "[Auth] New anonymous user | ID:", user.ID)

	session, err := session.New(user.ID)
	if err != nil {
		return nil, err
	}
	d.states.setSession(session)
	go d.deleteSessionWhenExpired(session)

	state := NewState(user, d)
	d.states.set(state)
	go state.run()

	session.SetCookie(w, r)

	return state, nil
}

func (d *Dispatch) deleteSessionWhenExpired(session *session.Session) {
	deleteSessionWhenExpired(session, d.states)
}

func deleteSessionWhenExpired(session *session.Session, stateStore *stateStore) {
	session.WaitUntilExpiration()
	stateStore.deleteSession(session.Key())
}