lariv-rs 0.1.0

Compile-time plugin web application framework built on Axum, SeaORM, Maud, and HTMX
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149

//! HTTP handlers for public signup and patched auth pages.

use axum::{
    http::HeaderMap,
    response::{IntoResponse, Response},
};

use crate::{
    components::{SharedChromeFolder, SlotCtx},
    html_form::HtmlFormBody,
    http::Cap,
    plugins::users::{
        auth, seed,
        session::{is_secure_request, set_auth_cookie},
        state::UsersState,
    },
    web::{Htmx, html_built_page_or_app_layout},
};

use super::{
    forms::SignupForm,
    templates::{LoginPageWithSignup, SignupPage, UnauthenticatedPageWithSignup},
};
use crate::plugins::users::forms::LoginForm;

/// HTTP handler: `signup_get`.
pub async fn signup_get(Cap(chrome): Cap<SharedChromeFolder>, htmx: Htmx) -> maud::Markup {
    let page = SignupPage {
        error: String::new(),
    };
    html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
}

/// HTTP handler: `signup_post`.
pub async fn signup_post(
    Cap(state): Cap<UsersState>,
    Cap(chrome): Cap<SharedChromeFolder>,
    htmx: Htmx,
    headers: HeaderMap,
    HtmlFormBody(form): HtmlFormBody<SignupForm>,
) -> Response {
    if form.terms_accepted.is_none() {
        let page = SignupPage {
            error: "You must accept the terms".into(),
        };
        return html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
            .into_response();
    }
    if form.password1 != form.password2 {
        let page = SignupPage {
            error: "Passwords do not match".into(),
        };
        return html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
            .into_response();
    }
    let role = match seed::ensure_unassigned_role(&state.db).await {
        Ok(r) => r,
        Err(e) => {
            let page = SignupPage {
                error: e.to_string(),
            };
            return html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
                .into_response();
        }
    };
    match auth::create_user(
        &state.db,
        auth::CreateUser {
            name: form.name,
            email: form.email,
            phone: form.phone,
            plain_password: form.password1,
            role_id: role.id,
            is_superuser: false,
            timezone: Some(form.timezone),
        },
    )
    .await
    {
        Ok(user) => match auth::login_token(&user, &state.signing_key, &state.jwt_issuer) {
            Ok(token) => {
                let mut response = htmx.redirect("/users/success");
                set_auth_cookie(response.headers_mut(), &token, is_secure_request(&headers));
                response
            }
            Err(_) => {
                let page = SignupPage {
                    error: "Account created but session failed".into(),
                };
                html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
                    .into_response()
            }
        },
        Err(e) => {
            let page = SignupPage {
                error: e.to_string(),
            };
            html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
                .into_response()
        }
    }
}

/// HTTP handler: `login_get` (login page with signup CTA).
pub async fn login_get(Cap(chrome): Cap<SharedChromeFolder>, htmx: Htmx) -> maud::Markup {
    let page = LoginPageWithSignup {
        error: String::new(),
    };
    html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
}

/// HTTP handler: `login_post` (re-renders signup-aware login on error).
pub async fn login_post(
    Cap(state): Cap<UsersState>,
    Cap(chrome): Cap<SharedChromeFolder>,
    htmx: Htmx,
    headers: HeaderMap,
    HtmlFormBody(form): HtmlFormBody<LoginForm>,
) -> Response {
    match auth::authenticate(&state.db, &form.email, &form.password).await {
        Ok(user) => match auth::login_token(&user, &state.signing_key, &state.jwt_issuer) {
            Ok(token) => {
                let mut response = htmx.redirect("/users/success");
                set_auth_cookie(response.headers_mut(), &token, is_secure_request(&headers));
                response
            }
            Err(_) => {
                let page = LoginPageWithSignup {
                    error: "Could not create session".into(),
                };
                html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
                    .into_response()
            }
        },
        Err(_) => {
            let page = LoginPageWithSignup {
                error: "Invalid email or password".into(),
            };
            html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
                .into_response()
        }
    }
}

/// HTTP handler: `unauthenticated` (landing with Sign Up).
pub async fn unauthenticated(Cap(chrome): Cap<SharedChromeFolder>, htmx: Htmx) -> maud::Markup {
    let page = UnauthenticatedPageWithSignup {};
    html_built_page_or_app_layout(&page, &htmx, &chrome, &SlotCtx::default())
}