main.go

// Copyright (C) 2016 JT Olds
// See LICENSE for copying information

// This example shows how to set up a web service that allows users to log in
// via one single OAuth2 Provider
package main

import (
	"encoding/hex"
	"flag"
	"fmt"
	"net/http"

	"gopkg.in/go-webhelp/whoauth2.v1"
	"gopkg.in/webhelp.v1/whcompat"
	"gopkg.in/webhelp.v1/wherr"
	"gopkg.in/webhelp.v1/whlog"
	"gopkg.in/webhelp.v1/whmux"
	"gopkg.in/webhelp.v1/whsess"
)

var (
	listenAddr   = flag.String("addr", ":8080", "address to listen on")
	cookieSecret = flag.String("cookie_secret", "abcdef0123456789",
		"the secret for securing cookie information")

	githubClientId     = flag.String("github_client_id", "", "")
	githubClientSecret = flag.String("github_client_secret", "", "")
)

type SampleHandler struct {
	Prov       *whoauth2.ProviderHandler
	Restricted bool
}

func (s *SampleHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
	t, err := s.Prov.Token(whcompat.Context(r))
	if err != nil {
		wherr.Handle(w, r, err)
		return
	}
	w.Header().Set("Content-Type", "text/html")
	if s.Restricted {
		fmt.Fprintf(w, `<h3>Restricted</h3>`)
	}
	if t != nil {
		fmt.Fprintf(w, `
		  <p>Logged in | <a href="%s">Log out</a></p>
	  `, s.Prov.LogoutURL("/"))
	} else {
		fmt.Fprintf(w, `
		  <p><a href="%s">Log in</a> | Logged out</p>
	  `, s.Prov.LoginURL(r.RequestURI, false))
	}
	if !s.Restricted {
		fmt.Fprintf(w, `
	    <p><a href="/restricted">Restricted</a></p>
    `)
	}
}

func main() {
	flag.Parse()

	secret, err := hex.DecodeString(*cookieSecret)
	if err != nil {
		panic(err)
	}
	store := whsess.NewCookieStore(secret)

	oauth := whoauth2.NewProviderHandler(
		whoauth2.Github(whoauth2.Config{
			ClientID:     *githubClientId,
			ClientSecret: *githubClientSecret}),
		"oauth-github", "/auth",
		whoauth2.RedirectURLs{})

	whlog.ListenAndServe(*listenAddr, whlog.LogRequests(whlog.Default,
		whsess.HandlerWithStore(store,
			whmux.Dir{
				"": &SampleHandler{Prov: oauth, Restricted: false},
				"restricted": oauth.LoginRequired(
					&SampleHandler{Prov: oauth, Restricted: true}),
				"auth": oauth})))
}