Compare commits
4 Commits
d4318c71b9
...
04534d6f98
| Author | SHA1 | Date |
|---|---|---|
 Domagoj Zecevic
|
04534d6f98 | 3 days ago |
|
Domagoj Zecevic
|
4890660c72 | 3 days ago |
|
Domagoj Zecevic
|
9b5f1d08d4 | 3 days ago |
|
Domagoj Zecevic
|
18d81da455 | 3 days ago |
34 changed files with 2796 additions and 15 deletions
@ -0,0 +1,122 @@ |
|||||
|
package auth |
||||
|
|
||||
|
import ( |
||||
|
"errors" |
||||
|
"html/template" |
||||
|
"net/http" |
||||
|
"strconv" |
||||
|
"time" |
||||
|
|
||||
|
webtemplates "github.com/domagojzecevic/cammonitor/internal/web/templates" |
||||
|
"github.com/go-chi/chi/v5" |
||||
|
) |
||||
|
|
||||
|
type Handler struct { |
||||
|
store *Store |
||||
|
sessionTTL time.Duration |
||||
|
} |
||||
|
|
||||
|
func NewHandler(store *Store, sessionTTL time.Duration) *Handler { |
||||
|
return &Handler{store: store, sessionTTL: sessionTTL} |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) LoginPage(w http.ResponseWriter, _ *http.Request) { |
||||
|
w.Header().Set("Content-Type", "text/html; charset=utf-8") |
||||
|
_ = loginTemplate.ExecuteTemplate(w, webtemplates.Login, nil) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) Login(w http.ResponseWriter, r *http.Request) { |
||||
|
if err := r.ParseForm(); err != nil { |
||||
|
http.Error(w, "invalid form", http.StatusBadRequest) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
user, err := h.store.Authenticate(r.FormValue("username"), r.FormValue("password")) |
||||
|
if errors.Is(err, ErrInvalidCredentials) { |
||||
|
http.Error(w, "invalid credentials", http.StatusUnauthorized) |
||||
|
return |
||||
|
} |
||||
|
if err != nil { |
||||
|
http.Error(w, "login failed", http.StatusInternalServerError) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
token, err := h.store.CreateSession(user.ID, h.sessionTTL) |
||||
|
if err != nil { |
||||
|
http.Error(w, "create session failed", http.StatusInternalServerError) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
http.SetCookie(w, &http.Cookie{ |
||||
|
Name: sessionCookieName, |
||||
|
Value: token, |
||||
|
Path: "/", |
||||
|
Expires: time.Now().UTC().Add(h.sessionTTL), |
||||
|
HttpOnly: true, |
||||
|
SameSite: http.SameSiteLaxMode, |
||||
|
}) |
||||
|
http.Redirect(w, r, "/", http.StatusSeeOther) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) Logout(w http.ResponseWriter, r *http.Request) { |
||||
|
if cookie, err := r.Cookie(sessionCookieName); err == nil { |
||||
|
_ = h.store.DeleteSession(cookie.Value) |
||||
|
} |
||||
|
|
||||
|
http.SetCookie(w, &http.Cookie{ |
||||
|
Name: sessionCookieName, |
||||
|
Value: "", |
||||
|
Path: "/", |
||||
|
Expires: time.Unix(0, 0), |
||||
|
MaxAge: -1, |
||||
|
HttpOnly: true, |
||||
|
SameSite: http.SameSiteLaxMode, |
||||
|
}) |
||||
|
http.Redirect(w, r, "/login", http.StatusSeeOther) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) UsersPage(w http.ResponseWriter, _ *http.Request) { |
||||
|
users, err := h.store.ListUsers() |
||||
|
if err != nil { |
||||
|
http.Error(w, "list users failed", http.StatusInternalServerError) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
w.Header().Set("Content-Type", "text/html; charset=utf-8") |
||||
|
_ = adminUsersTemplate.ExecuteTemplate(w, webtemplates.AdminUsers, struct { |
||||
|
Users []User |
||||
|
}{Users: users}) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) CreateUser(w http.ResponseWriter, r *http.Request) { |
||||
|
if err := r.ParseForm(); err != nil { |
||||
|
http.Error(w, "invalid form", http.StatusBadRequest) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
if err := h.store.CreateUser(r.FormValue("username"), r.FormValue("password"), r.FormValue("is_admin") == "on"); err != nil { |
||||
|
http.Error(w, "create user failed", http.StatusBadRequest) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
http.Redirect(w, r, "/admin/users", http.StatusSeeOther) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) DeleteUser(w http.ResponseWriter, r *http.Request) { |
||||
|
id, err := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64) |
||||
|
if err != nil { |
||||
|
http.Error(w, "invalid user id", http.StatusBadRequest) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
if err := h.store.DeleteUser(id); err != nil { |
||||
|
http.Error(w, "delete user failed", http.StatusInternalServerError) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
http.Redirect(w, r, "/admin/users", http.StatusSeeOther) |
||||
|
} |
||||
|
|
||||
|
var loginTemplate = template.Must(template.ParseFS(webtemplates.FS, webtemplates.Login)) |
||||
|
|
||||
|
var adminUsersTemplate = template.Must(template.ParseFS(webtemplates.FS, webtemplates.AdminUsers)) |
||||
@ -0,0 +1,192 @@ |
|||||
|
package auth |
||||
|
|
||||
|
import ( |
||||
|
"bytes" |
||||
|
"html/template" |
||||
|
"net/http" |
||||
|
"net/http/httptest" |
||||
|
"net/url" |
||||
|
"os" |
||||
|
"path/filepath" |
||||
|
"strings" |
||||
|
"testing" |
||||
|
"time" |
||||
|
) |
||||
|
|
||||
|
func TestLoginPageRenders(t *testing.T) { |
||||
|
handler, _, _ := newTestHandler(t) |
||||
|
|
||||
|
request := httptest.NewRequest(http.MethodGet, "/login", nil) |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
handler.LoginPage(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusOK { |
||||
|
t.Fatalf("expected 200, got %d", response.Code) |
||||
|
} |
||||
|
if body := response.Body.String(); !strings.Contains(body, `<form`) || !strings.Contains(body, `name="username"`) { |
||||
|
t.Fatalf("login page missing expected form fields: %s", body) |
||||
|
} |
||||
|
|
||||
|
if got, want := strings.TrimSpace(response.Body.String()), strings.TrimSpace(readTemplateFile(t, "login.html")); got != want { |
||||
|
t.Fatalf("login page was not rendered from template file\nwant:\n%s\n\ngot:\n%s", want, got) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestLoginValidCredentialsSetSessionCookieAndRedirect(t *testing.T) { |
||||
|
handler, store, _ := newTestHandler(t) |
||||
|
if err := store.CreateUser("alice", "secret", false); err != nil { |
||||
|
t.Fatalf("create user: %v", err) |
||||
|
} |
||||
|
|
||||
|
form := url.Values{"username": {"alice"}, "password": {"secret"}} |
||||
|
request := httptest.NewRequest(http.MethodPost, "/login", strings.NewReader(form.Encode())) |
||||
|
request.Header.Set("Content-Type", "application/x-www-form-urlencoded") |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
handler.Login(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusSeeOther { |
||||
|
t.Fatalf("expected 303, got %d", response.Code) |
||||
|
} |
||||
|
if location := response.Header().Get("Location"); location != "/" { |
||||
|
t.Fatalf("expected redirect to /, got %q", location) |
||||
|
} |
||||
|
|
||||
|
cookie := findCookie(response.Result().Cookies(), sessionCookieName) |
||||
|
if cookie == nil || cookie.Value == "" { |
||||
|
t.Fatalf("expected session cookie, got %#v", response.Result().Cookies()) |
||||
|
} |
||||
|
if _, err := store.GetSession(cookie.Value); err != nil { |
||||
|
t.Fatalf("session cookie was not persisted: %v", err) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestLoginInvalidCredentialsReturnsUnauthorized(t *testing.T) { |
||||
|
handler, store, _ := newTestHandler(t) |
||||
|
if err := store.CreateUser("alice", "secret", false); err != nil { |
||||
|
t.Fatalf("create user: %v", err) |
||||
|
} |
||||
|
|
||||
|
form := url.Values{"username": {"alice"}, "password": {"wrong"}} |
||||
|
request := httptest.NewRequest(http.MethodPost, "/login", strings.NewReader(form.Encode())) |
||||
|
request.Header.Set("Content-Type", "application/x-www-form-urlencoded") |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
handler.Login(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusUnauthorized { |
||||
|
t.Fatalf("expected 401, got %d", response.Code) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestAdminUsersRequiresAdmin(t *testing.T) { |
||||
|
handler, store, mux := newTestHandler(t) |
||||
|
if err := store.CreateUser("alice", "secret", false); err != nil { |
||||
|
t.Fatalf("create regular user: %v", err) |
||||
|
} |
||||
|
if err := store.CreateUser("admin", "secret", true); err != nil { |
||||
|
t.Fatalf("create admin user: %v", err) |
||||
|
} |
||||
|
|
||||
|
mux.Handle("/admin/users", RequireAuth(store)(RequireAdmin(http.HandlerFunc(handler.UsersPage)))) |
||||
|
|
||||
|
request := httptest.NewRequest(http.MethodGet, "/admin/users", nil) |
||||
|
response := httptest.NewRecorder() |
||||
|
mux.ServeHTTP(response, request) |
||||
|
if response.Code != http.StatusFound { |
||||
|
t.Fatalf("expected unauthenticated redirect, got %d", response.Code) |
||||
|
} |
||||
|
if location := response.Header().Get("Location"); location != "/login" { |
||||
|
t.Fatalf("expected redirect to /login, got %q", location) |
||||
|
} |
||||
|
|
||||
|
regularCookie := sessionCookie(t, store, "alice", "secret") |
||||
|
request = httptest.NewRequest(http.MethodGet, "/admin/users", nil) |
||||
|
request.AddCookie(regularCookie) |
||||
|
response = httptest.NewRecorder() |
||||
|
mux.ServeHTTP(response, request) |
||||
|
if response.Code != http.StatusForbidden { |
||||
|
t.Fatalf("expected regular user forbidden, got %d", response.Code) |
||||
|
} |
||||
|
|
||||
|
adminCookie := sessionCookie(t, store, "admin", "secret") |
||||
|
request = httptest.NewRequest(http.MethodGet, "/admin/users", nil) |
||||
|
request.AddCookie(adminCookie) |
||||
|
response = httptest.NewRecorder() |
||||
|
mux.ServeHTTP(response, request) |
||||
|
if response.Code != http.StatusOK { |
||||
|
t.Fatalf("expected admin page, got %d", response.Code) |
||||
|
} |
||||
|
if !strings.Contains(response.Body.String(), "admin") { |
||||
|
t.Fatalf("admin page missing user list: %s", response.Body.String()) |
||||
|
} |
||||
|
|
||||
|
users, err := store.ListUsers() |
||||
|
if err != nil { |
||||
|
t.Fatalf("list users: %v", err) |
||||
|
} |
||||
|
if got, want := strings.TrimSpace(response.Body.String()), strings.TrimSpace(renderTemplateFile(t, "admin_users.html", struct { |
||||
|
Users []User |
||||
|
}{Users: users})); got != want { |
||||
|
t.Fatalf("admin users page was not rendered from template file\nwant:\n%s\n\ngot:\n%s", want, got) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func newTestHandler(t *testing.T) (*Handler, *Store, *http.ServeMux) { |
||||
|
t.Helper() |
||||
|
|
||||
|
database := openTestDB(t) |
||||
|
store := NewStore(database) |
||||
|
handler := NewHandler(store, time.Hour) |
||||
|
|
||||
|
return handler, store, http.NewServeMux() |
||||
|
} |
||||
|
|
||||
|
func sessionCookie(t *testing.T, store *Store, username, password string) *http.Cookie { |
||||
|
t.Helper() |
||||
|
|
||||
|
user, err := store.Authenticate(username, password) |
||||
|
if err != nil { |
||||
|
t.Fatalf("authenticate %s: %v", username, err) |
||||
|
} |
||||
|
token, err := store.CreateSession(user.ID, time.Hour) |
||||
|
if err != nil { |
||||
|
t.Fatalf("create session: %v", err) |
||||
|
} |
||||
|
return &http.Cookie{Name: sessionCookieName, Value: token} |
||||
|
} |
||||
|
|
||||
|
func findCookie(cookies []*http.Cookie, name string) *http.Cookie { |
||||
|
for _, cookie := range cookies { |
||||
|
if cookie.Name == name { |
||||
|
return cookie |
||||
|
} |
||||
|
} |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func readTemplateFile(t *testing.T, name string) string { |
||||
|
t.Helper() |
||||
|
|
||||
|
content, err := os.ReadFile(filepath.Join("..", "web", "templates", name)) |
||||
|
if err != nil { |
||||
|
t.Fatalf("read template %s: %v", name, err) |
||||
|
} |
||||
|
return string(content) |
||||
|
} |
||||
|
|
||||
|
func renderTemplateFile(t *testing.T, name string, data any) string { |
||||
|
t.Helper() |
||||
|
|
||||
|
tmpl, err := template.ParseFiles(filepath.Join("..", "web", "templates", name)) |
||||
|
if err != nil { |
||||
|
t.Fatalf("parse template %s: %v", name, err) |
||||
|
} |
||||
|
|
||||
|
var output bytes.Buffer |
||||
|
if err := tmpl.ExecuteTemplate(&output, name, data); err != nil { |
||||
|
t.Fatalf("execute template %s: %v", name, err) |
||||
|
} |
||||
|
return output.String() |
||||
|
} |
||||
@ -0,0 +1,50 @@ |
|||||
|
package auth |
||||
|
|
||||
|
import ( |
||||
|
"context" |
||||
|
"net/http" |
||||
|
) |
||||
|
|
||||
|
const sessionCookieName = "session" |
||||
|
|
||||
|
type contextKey string |
||||
|
|
||||
|
const userContextKey contextKey = "user" |
||||
|
|
||||
|
func RequireAuth(store *Store) func(http.Handler) http.Handler { |
||||
|
return func(next http.Handler) http.Handler { |
||||
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
||||
|
cookie, err := r.Cookie(sessionCookieName) |
||||
|
if err != nil || cookie.Value == "" { |
||||
|
http.Redirect(w, r, "/login", http.StatusFound) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
session, err := store.GetSession(cookie.Value) |
||||
|
if err != nil { |
||||
|
http.Redirect(w, r, "/login", http.StatusFound) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
ctx := context.WithValue(r.Context(), userContextKey, session.User) |
||||
|
next.ServeHTTP(w, r.WithContext(ctx)) |
||||
|
}) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func RequireAdmin(next http.Handler) http.Handler { |
||||
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
||||
|
user, ok := UserFromContext(r.Context()) |
||||
|
if !ok || !user.IsAdmin { |
||||
|
http.Error(w, "forbidden", http.StatusForbidden) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
next.ServeHTTP(w, r) |
||||
|
}) |
||||
|
} |
||||
|
|
||||
|
func UserFromContext(ctx context.Context) (*User, bool) { |
||||
|
user, ok := ctx.Value(userContextKey).(*User) |
||||
|
return user, ok |
||||
|
} |
||||
@ -0,0 +1,208 @@ |
|||||
|
package auth |
||||
|
|
||||
|
import ( |
||||
|
"crypto/rand" |
||||
|
"database/sql" |
||||
|
"encoding/base64" |
||||
|
"errors" |
||||
|
"fmt" |
||||
|
"strings" |
||||
|
"time" |
||||
|
|
||||
|
"golang.org/x/crypto/bcrypt" |
||||
|
) |
||||
|
|
||||
|
var ErrInvalidCredentials = errors.New("invalid credentials") |
||||
|
var ErrSessionNotFound = errors.New("session not found") |
||||
|
|
||||
|
type Store struct { |
||||
|
db *sql.DB |
||||
|
} |
||||
|
|
||||
|
type User struct { |
||||
|
ID int64 |
||||
|
Username string |
||||
|
IsAdmin bool |
||||
|
} |
||||
|
|
||||
|
type Session struct { |
||||
|
Token string |
||||
|
UserID int64 |
||||
|
ExpiresAt time.Time |
||||
|
User *User |
||||
|
} |
||||
|
|
||||
|
func NewStore(database *sql.DB) *Store { |
||||
|
return &Store{db: database} |
||||
|
} |
||||
|
|
||||
|
func (s *Store) EnsureAdmin(username, password string) error { |
||||
|
username = strings.TrimSpace(username) |
||||
|
if username == "" || password == "" { |
||||
|
return fmt.Errorf("admin username and password are required") |
||||
|
} |
||||
|
|
||||
|
var count int |
||||
|
if err := s.db.QueryRow(`SELECT COUNT(*) FROM users`).Scan(&count); err != nil { |
||||
|
return fmt.Errorf("count users: %w", err) |
||||
|
} |
||||
|
if count > 0 { |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
return s.CreateUser(username, password, true) |
||||
|
} |
||||
|
|
||||
|
func (s *Store) CreateUser(username, password string, isAdmin bool) error { |
||||
|
username = strings.TrimSpace(username) |
||||
|
if username == "" { |
||||
|
return fmt.Errorf("username is required") |
||||
|
} |
||||
|
if password == "" { |
||||
|
return fmt.Errorf("password is required") |
||||
|
} |
||||
|
|
||||
|
hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost) |
||||
|
if err != nil { |
||||
|
return fmt.Errorf("hash password: %w", err) |
||||
|
} |
||||
|
|
||||
|
adminValue := 0 |
||||
|
if isAdmin { |
||||
|
adminValue = 1 |
||||
|
} |
||||
|
|
||||
|
if _, err := s.db.Exec( |
||||
|
`INSERT INTO users (username, password_hash, is_admin) VALUES (?, ?, ?)`, |
||||
|
username, |
||||
|
string(hash), |
||||
|
adminValue, |
||||
|
); err != nil { |
||||
|
return fmt.Errorf("create user: %w", err) |
||||
|
} |
||||
|
|
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) DeleteUser(id int64) error { |
||||
|
if _, err := s.db.Exec(`DELETE FROM users WHERE id = ?`, id); err != nil { |
||||
|
return fmt.Errorf("delete user: %w", err) |
||||
|
} |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) ListUsers() ([]User, error) { |
||||
|
rows, err := s.db.Query(`SELECT id, username, is_admin FROM users ORDER BY username`) |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("list users: %w", err) |
||||
|
} |
||||
|
defer rows.Close() |
||||
|
|
||||
|
var users []User |
||||
|
for rows.Next() { |
||||
|
var user User |
||||
|
var isAdmin int |
||||
|
if err := rows.Scan(&user.ID, &user.Username, &isAdmin); err != nil { |
||||
|
return nil, fmt.Errorf("scan user: %w", err) |
||||
|
} |
||||
|
user.IsAdmin = isAdmin != 0 |
||||
|
users = append(users, user) |
||||
|
} |
||||
|
if err := rows.Err(); err != nil { |
||||
|
return nil, fmt.Errorf("iterate users: %w", err) |
||||
|
} |
||||
|
|
||||
|
return users, nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) Authenticate(username, password string) (*User, error) { |
||||
|
var user User |
||||
|
var hash string |
||||
|
var isAdmin int |
||||
|
err := s.db.QueryRow( |
||||
|
`SELECT id, username, password_hash, is_admin FROM users WHERE username = ?`, |
||||
|
strings.TrimSpace(username), |
||||
|
).Scan(&user.ID, &user.Username, &hash, &isAdmin) |
||||
|
if errors.Is(err, sql.ErrNoRows) { |
||||
|
return nil, ErrInvalidCredentials |
||||
|
} |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("load user: %w", err) |
||||
|
} |
||||
|
|
||||
|
if err := bcrypt.CompareHashAndPassword([]byte(hash), []byte(password)); err != nil { |
||||
|
return nil, ErrInvalidCredentials |
||||
|
} |
||||
|
|
||||
|
user.IsAdmin = isAdmin != 0 |
||||
|
return &user, nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) CreateSession(userID int64, ttl time.Duration) (string, error) { |
||||
|
tokenBytes := make([]byte, 32) |
||||
|
if _, err := rand.Read(tokenBytes); err != nil { |
||||
|
return "", fmt.Errorf("generate session token: %w", err) |
||||
|
} |
||||
|
token := base64.RawURLEncoding.EncodeToString(tokenBytes) |
||||
|
expiresAt := time.Now().UTC().Add(ttl) |
||||
|
|
||||
|
if _, err := s.db.Exec( |
||||
|
`INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)`, |
||||
|
token, |
||||
|
userID, |
||||
|
expiresAt.Format(time.RFC3339Nano), |
||||
|
); err != nil { |
||||
|
return "", fmt.Errorf("create session: %w", err) |
||||
|
} |
||||
|
|
||||
|
return token, nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) GetSession(token string) (*Session, error) { |
||||
|
var session Session |
||||
|
var expiresAt string |
||||
|
var user User |
||||
|
var isAdmin int |
||||
|
err := s.db.QueryRow( |
||||
|
`SELECT s.token, s.user_id, s.expires_at, u.username, u.is_admin |
||||
|
FROM sessions s |
||||
|
JOIN users u ON u.id = s.user_id |
||||
|
WHERE s.token = ?`, |
||||
|
token, |
||||
|
).Scan(&session.Token, &session.UserID, &expiresAt, &user.Username, &isAdmin) |
||||
|
if errors.Is(err, sql.ErrNoRows) { |
||||
|
return nil, ErrSessionNotFound |
||||
|
} |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("load session: %w", err) |
||||
|
} |
||||
|
|
||||
|
parsedExpiresAt, err := time.Parse(time.RFC3339Nano, expiresAt) |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("parse session expiry: %w", err) |
||||
|
} |
||||
|
if !parsedExpiresAt.After(time.Now().UTC()) { |
||||
|
_ = s.DeleteSession(token) |
||||
|
return nil, ErrSessionNotFound |
||||
|
} |
||||
|
|
||||
|
user.ID = session.UserID |
||||
|
user.IsAdmin = isAdmin != 0 |
||||
|
session.ExpiresAt = parsedExpiresAt |
||||
|
session.User = &user |
||||
|
return &session, nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) DeleteSession(token string) error { |
||||
|
if _, err := s.db.Exec(`DELETE FROM sessions WHERE token = ?`, token); err != nil { |
||||
|
return fmt.Errorf("delete session: %w", err) |
||||
|
} |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *Store) PurgeExpiredSessions() error { |
||||
|
if _, err := s.db.Exec(`DELETE FROM sessions WHERE expires_at <= ?`, time.Now().UTC().Format(time.RFC3339Nano)); err != nil { |
||||
|
return fmt.Errorf("purge expired sessions: %w", err) |
||||
|
} |
||||
|
return nil |
||||
|
} |
||||
@ -0,0 +1,101 @@ |
|||||
|
package auth |
||||
|
|
||||
|
import ( |
||||
|
"database/sql" |
||||
|
"testing" |
||||
|
"time" |
||||
|
|
||||
|
"github.com/domagojzecevic/cammonitor/internal/db" |
||||
|
) |
||||
|
|
||||
|
func TestStoreAuthenticateHappyPathAndWrongPassword(t *testing.T) { |
||||
|
database := openTestDB(t) |
||||
|
store := NewStore(database) |
||||
|
|
||||
|
if err := store.CreateUser("alice", "secret", false); err != nil { |
||||
|
t.Fatalf("create user: %v", err) |
||||
|
} |
||||
|
|
||||
|
user, err := store.Authenticate("alice", "secret") |
||||
|
if err != nil { |
||||
|
t.Fatalf("authenticate valid user: %v", err) |
||||
|
} |
||||
|
if user.Username != "alice" { |
||||
|
t.Fatalf("expected alice, got %q", user.Username) |
||||
|
} |
||||
|
if user.IsAdmin { |
||||
|
t.Fatal("expected regular user") |
||||
|
} |
||||
|
|
||||
|
if _, err := store.Authenticate("alice", "wrong"); err == nil { |
||||
|
t.Fatal("expected wrong password to fail") |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestStoreExpiredSessionIsRejected(t *testing.T) { |
||||
|
database := openTestDB(t) |
||||
|
store := NewStore(database) |
||||
|
|
||||
|
if err := store.CreateUser("alice", "secret", false); err != nil { |
||||
|
t.Fatalf("create user: %v", err) |
||||
|
} |
||||
|
|
||||
|
user, err := store.Authenticate("alice", "secret") |
||||
|
if err != nil { |
||||
|
t.Fatalf("authenticate: %v", err) |
||||
|
} |
||||
|
|
||||
|
token, err := store.CreateSession(user.ID, -time.Minute) |
||||
|
if err != nil { |
||||
|
t.Fatalf("create session: %v", err) |
||||
|
} |
||||
|
|
||||
|
if _, err := store.GetSession(token); err == nil { |
||||
|
t.Fatal("expected expired session to fail") |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestEnsureAdminCreatesFirstRunAdminOnlyWhenEmpty(t *testing.T) { |
||||
|
database := openTestDB(t) |
||||
|
store := NewStore(database) |
||||
|
|
||||
|
if err := store.EnsureAdmin("admin", "secret"); err != nil { |
||||
|
t.Fatalf("ensure admin: %v", err) |
||||
|
} |
||||
|
|
||||
|
users, err := store.ListUsers() |
||||
|
if err != nil { |
||||
|
t.Fatalf("list users: %v", err) |
||||
|
} |
||||
|
if len(users) != 1 || users[0].Username != "admin" || !users[0].IsAdmin { |
||||
|
t.Fatalf("unexpected users after bootstrap: %#v", users) |
||||
|
} |
||||
|
|
||||
|
if err := store.EnsureAdmin("other", "secret"); err != nil { |
||||
|
t.Fatalf("ensure admin second run: %v", err) |
||||
|
} |
||||
|
|
||||
|
users, err = store.ListUsers() |
||||
|
if err != nil { |
||||
|
t.Fatalf("list users second run: %v", err) |
||||
|
} |
||||
|
if len(users) != 1 { |
||||
|
t.Fatalf("expected no second bootstrap user, got %d", len(users)) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func openTestDB(t *testing.T) *sql.DB { |
||||
|
t.Helper() |
||||
|
|
||||
|
database, err := db.Open(t.TempDir() + "/test.db") |
||||
|
if err != nil { |
||||
|
t.Fatalf("open database: %v", err) |
||||
|
} |
||||
|
t.Cleanup(func() { |
||||
|
if err := database.Close(); err != nil { |
||||
|
t.Fatalf("close database: %v", err) |
||||
|
} |
||||
|
}) |
||||
|
|
||||
|
return database |
||||
|
} |
||||
@ -0,0 +1,104 @@ |
|||||
|
package footage |
||||
|
|
||||
|
import ( |
||||
|
"sort" |
||||
|
"sync" |
||||
|
"time" |
||||
|
) |
||||
|
|
||||
|
type Index struct { |
||||
|
root string |
||||
|
interval time.Duration |
||||
|
|
||||
|
mu sync.RWMutex |
||||
|
days map[string]DayEntry |
||||
|
|
||||
|
done chan struct{} |
||||
|
once sync.Once |
||||
|
} |
||||
|
|
||||
|
func NewIndex(root string, interval time.Duration) *Index { |
||||
|
index := &Index{ |
||||
|
root: root, |
||||
|
interval: interval, |
||||
|
days: make(map[string]DayEntry), |
||||
|
done: make(chan struct{}), |
||||
|
} |
||||
|
index.rescan() |
||||
|
|
||||
|
if interval > 0 { |
||||
|
go index.run() |
||||
|
} |
||||
|
|
||||
|
return index |
||||
|
} |
||||
|
|
||||
|
func (i *Index) DayList() []string { |
||||
|
i.mu.RLock() |
||||
|
defer i.mu.RUnlock() |
||||
|
|
||||
|
days := make([]string, 0, len(i.days)) |
||||
|
for day := range i.days { |
||||
|
days = append(days, day) |
||||
|
} |
||||
|
sort.Sort(sort.Reverse(sort.StringSlice(days))) |
||||
|
return days |
||||
|
} |
||||
|
|
||||
|
func (i *Index) Day(date string) (*DayEntry, bool) { |
||||
|
i.mu.RLock() |
||||
|
defer i.mu.RUnlock() |
||||
|
|
||||
|
entry, ok := i.days[date] |
||||
|
if !ok { |
||||
|
return nil, false |
||||
|
} |
||||
|
|
||||
|
copied := copyDayEntry(entry) |
||||
|
return &copied, true |
||||
|
} |
||||
|
|
||||
|
func (i *Index) Close() { |
||||
|
i.once.Do(func() { |
||||
|
close(i.done) |
||||
|
}) |
||||
|
} |
||||
|
|
||||
|
func (i *Index) run() { |
||||
|
ticker := time.NewTicker(i.interval) |
||||
|
defer ticker.Stop() |
||||
|
|
||||
|
for { |
||||
|
select { |
||||
|
case <-ticker.C: |
||||
|
i.rescan() |
||||
|
case <-i.done: |
||||
|
return |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func (i *Index) rescan() { |
||||
|
days, err := Scan(i.root) |
||||
|
if err != nil { |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
next := make(map[string]DayEntry, len(days)) |
||||
|
for _, day := range days { |
||||
|
next[day.Date] = copyDayEntry(day) |
||||
|
} |
||||
|
|
||||
|
i.mu.Lock() |
||||
|
i.days = next |
||||
|
i.mu.Unlock() |
||||
|
} |
||||
|
|
||||
|
func copyDayEntry(entry DayEntry) DayEntry { |
||||
|
copied := DayEntry{ |
||||
|
Date: entry.Date, |
||||
|
Images: append([]ImageFile(nil), entry.Images...), |
||||
|
Videos: append([]VideoFile(nil), entry.Videos...), |
||||
|
} |
||||
|
return copied |
||||
|
} |
||||
@ -0,0 +1,96 @@ |
|||||
|
package footage |
||||
|
|
||||
|
import ( |
||||
|
"os" |
||||
|
"path/filepath" |
||||
|
"sync" |
||||
|
"testing" |
||||
|
"time" |
||||
|
) |
||||
|
|
||||
|
func TestIndexListsDaysNewestFirstAndReturnsCopies(t *testing.T) { |
||||
|
root := filepath.Join("..", "..", "testdata", "footage") |
||||
|
|
||||
|
index := NewIndex(root, time.Hour) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
days := index.DayList() |
||||
|
if len(days) != 2 { |
||||
|
t.Fatalf("expected 2 days, got %d", len(days)) |
||||
|
} |
||||
|
if days[0] != "20260102" || days[1] != "20260101" { |
||||
|
t.Fatalf("expected days sorted newest first, got %#v", days) |
||||
|
} |
||||
|
|
||||
|
entry, ok := index.Day("20260101") |
||||
|
if !ok { |
||||
|
t.Fatalf("expected day 20260101") |
||||
|
} |
||||
|
entry.Images = nil |
||||
|
|
||||
|
entryAgain, ok := index.Day("20260101") |
||||
|
if !ok { |
||||
|
t.Fatalf("expected day 20260101 on second lookup") |
||||
|
} |
||||
|
if len(entryAgain.Images) != 2 { |
||||
|
t.Fatalf("expected index day copy to preserve images, got %d", len(entryAgain.Images)) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestIndexPeriodicRescan(t *testing.T) { |
||||
|
root := t.TempDir() |
||||
|
writeFixtureFile(t, root, filepath.Join("20260101", "images", "A26010112000001.jpg")) |
||||
|
|
||||
|
index := NewIndex(root, 10*time.Millisecond) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
if days := index.DayList(); len(days) != 1 || days[0] != "20260101" { |
||||
|
t.Fatalf("expected initial day 20260101, got %#v", days) |
||||
|
} |
||||
|
|
||||
|
writeFixtureFile(t, root, filepath.Join("20260102", "record", "A260102_130000_130015.265")) |
||||
|
|
||||
|
deadline := time.Now().Add(time.Second) |
||||
|
for time.Now().Before(deadline) { |
||||
|
days := index.DayList() |
||||
|
if len(days) == 2 && days[0] == "20260102" && days[1] == "20260101" { |
||||
|
return |
||||
|
} |
||||
|
time.Sleep(10 * time.Millisecond) |
||||
|
} |
||||
|
|
||||
|
t.Fatalf("timed out waiting for rescan to include new day, got %#v", index.DayList()) |
||||
|
} |
||||
|
|
||||
|
func TestIndexConcurrentAccessDuringRescan(t *testing.T) { |
||||
|
root := t.TempDir() |
||||
|
writeFixtureFile(t, root, filepath.Join("20260101", "images", "A26010112000001.jpg")) |
||||
|
|
||||
|
index := NewIndex(root, time.Millisecond) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
var wg sync.WaitGroup |
||||
|
for worker := 0; worker < 8; worker++ { |
||||
|
wg.Add(1) |
||||
|
go func() { |
||||
|
defer wg.Done() |
||||
|
for i := 0; i < 100; i++ { |
||||
|
_ = index.DayList() |
||||
|
_, _ = index.Day("20260101") |
||||
|
} |
||||
|
}() |
||||
|
} |
||||
|
wg.Wait() |
||||
|
} |
||||
|
|
||||
|
func writeFixtureFile(t *testing.T, root, relPath string) { |
||||
|
t.Helper() |
||||
|
|
||||
|
path := filepath.Join(root, relPath) |
||||
|
if err := os.MkdirAll(filepath.Dir(path), 0o755); err != nil { |
||||
|
t.Fatalf("create fixture dir: %v", err) |
||||
|
} |
||||
|
if err := os.WriteFile(path, []byte("fixture"), 0o644); err != nil { |
||||
|
t.Fatalf("write fixture file: %v", err) |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,212 @@ |
|||||
|
package footage |
||||
|
|
||||
|
import ( |
||||
|
"fmt" |
||||
|
"os" |
||||
|
"path/filepath" |
||||
|
"regexp" |
||||
|
"sort" |
||||
|
"time" |
||||
|
) |
||||
|
|
||||
|
var ( |
||||
|
imageFilenamePattern = regexp.MustCompile(`^A(\d{6})(\d{6})\d+\.jpg$`) |
||||
|
videoFilenamePattern = regexp.MustCompile(`^A(\d{6})_(\d{6})_(\d{6})\.265$`) |
||||
|
) |
||||
|
|
||||
|
type DayEntry struct { |
||||
|
Date string |
||||
|
Images []ImageFile |
||||
|
Videos []VideoFile |
||||
|
} |
||||
|
|
||||
|
type ImageFile struct { |
||||
|
RelPath string |
||||
|
Filename string |
||||
|
Timestamp time.Time |
||||
|
} |
||||
|
|
||||
|
type VideoFile struct { |
||||
|
RelPath string |
||||
|
Filename string |
||||
|
StartTime time.Time |
||||
|
EndTime time.Time |
||||
|
Duration time.Duration |
||||
|
} |
||||
|
|
||||
|
func Scan(root string) ([]DayEntry, error) { |
||||
|
dayDirs, err := os.ReadDir(root) |
||||
|
if err != nil { |
||||
|
if os.IsNotExist(err) { |
||||
|
return nil, nil |
||||
|
} |
||||
|
return nil, fmt.Errorf("read footage root: %w", err) |
||||
|
} |
||||
|
|
||||
|
days := make([]DayEntry, 0, len(dayDirs)) |
||||
|
for _, dayDir := range dayDirs { |
||||
|
if !dayDir.IsDir() { |
||||
|
continue |
||||
|
} |
||||
|
if _, err := time.ParseInLocation("20060102", dayDir.Name(), time.Local); err != nil { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
entry := DayEntry{Date: dayDir.Name()} |
||||
|
dayPath := filepath.Join(root, dayDir.Name()) |
||||
|
|
||||
|
images, err := scanImages(root, dayPath) |
||||
|
if err != nil { |
||||
|
return nil, err |
||||
|
} |
||||
|
entry.Images = images |
||||
|
|
||||
|
videos, err := scanVideos(root, dayPath) |
||||
|
if err != nil { |
||||
|
return nil, err |
||||
|
} |
||||
|
entry.Videos = videos |
||||
|
|
||||
|
days = append(days, entry) |
||||
|
} |
||||
|
|
||||
|
sort.Slice(days, func(i, j int) bool { |
||||
|
return days[i].Date > days[j].Date |
||||
|
}) |
||||
|
|
||||
|
return days, nil |
||||
|
} |
||||
|
|
||||
|
func scanImages(root, dayPath string) ([]ImageFile, error) { |
||||
|
imageDir := filepath.Join(dayPath, "images") |
||||
|
entries, err := os.ReadDir(imageDir) |
||||
|
if err != nil { |
||||
|
if os.IsNotExist(err) { |
||||
|
return nil, nil |
||||
|
} |
||||
|
return nil, fmt.Errorf("read image dir %s: %w", imageDir, err) |
||||
|
} |
||||
|
|
||||
|
images := make([]ImageFile, 0, len(entries)) |
||||
|
for _, entry := range entries { |
||||
|
if entry.IsDir() { |
||||
|
continue |
||||
|
} |
||||
|
info, err := entry.Info() |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("read image info %s: %w", entry.Name(), err) |
||||
|
} |
||||
|
if !info.Mode().Type().IsRegular() { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
image, err := parseImageFilename(entry.Name()) |
||||
|
if err != nil { |
||||
|
continue |
||||
|
} |
||||
|
image.RelPath = mustRel(root, filepath.Join(imageDir, entry.Name())) |
||||
|
images = append(images, image) |
||||
|
} |
||||
|
|
||||
|
sort.Slice(images, func(i, j int) bool { |
||||
|
if images[i].Timestamp.Equal(images[j].Timestamp) { |
||||
|
return images[i].Filename < images[j].Filename |
||||
|
} |
||||
|
return images[i].Timestamp.Before(images[j].Timestamp) |
||||
|
}) |
||||
|
|
||||
|
return images, nil |
||||
|
} |
||||
|
|
||||
|
func scanVideos(root, dayPath string) ([]VideoFile, error) { |
||||
|
recordDir := filepath.Join(dayPath, "record") |
||||
|
entries, err := os.ReadDir(recordDir) |
||||
|
if err != nil { |
||||
|
if os.IsNotExist(err) { |
||||
|
return nil, nil |
||||
|
} |
||||
|
return nil, fmt.Errorf("read record dir %s: %w", recordDir, err) |
||||
|
} |
||||
|
|
||||
|
videos := make([]VideoFile, 0, len(entries)) |
||||
|
for _, entry := range entries { |
||||
|
if entry.IsDir() { |
||||
|
continue |
||||
|
} |
||||
|
info, err := entry.Info() |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("read video info %s: %w", entry.Name(), err) |
||||
|
} |
||||
|
if !info.Mode().Type().IsRegular() { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
video, err := parseVideoFilename(entry.Name()) |
||||
|
if err != nil { |
||||
|
continue |
||||
|
} |
||||
|
video.RelPath = mustRel(root, filepath.Join(recordDir, entry.Name())) |
||||
|
videos = append(videos, video) |
||||
|
} |
||||
|
|
||||
|
sort.Slice(videos, func(i, j int) bool { |
||||
|
if videos[i].StartTime.Equal(videos[j].StartTime) { |
||||
|
return videos[i].Filename < videos[j].Filename |
||||
|
} |
||||
|
return videos[i].StartTime.Before(videos[j].StartTime) |
||||
|
}) |
||||
|
|
||||
|
return videos, nil |
||||
|
} |
||||
|
|
||||
|
func parseImageFilename(name string) (ImageFile, error) { |
||||
|
matches := imageFilenamePattern.FindStringSubmatch(name) |
||||
|
if matches == nil { |
||||
|
return ImageFile{}, fmt.Errorf("invalid image filename %q", name) |
||||
|
} |
||||
|
|
||||
|
timestamp, err := time.ParseInLocation("060102150405", matches[1]+matches[2], time.Local) |
||||
|
if err != nil { |
||||
|
return ImageFile{}, fmt.Errorf("parse image timestamp %q: %w", name, err) |
||||
|
} |
||||
|
|
||||
|
return ImageFile{ |
||||
|
Filename: name, |
||||
|
Timestamp: timestamp, |
||||
|
}, nil |
||||
|
} |
||||
|
|
||||
|
func parseVideoFilename(name string) (VideoFile, error) { |
||||
|
matches := videoFilenamePattern.FindStringSubmatch(name) |
||||
|
if matches == nil { |
||||
|
return VideoFile{}, fmt.Errorf("invalid video filename %q", name) |
||||
|
} |
||||
|
|
||||
|
start, err := time.ParseInLocation("060102150405", matches[1]+matches[2], time.Local) |
||||
|
if err != nil { |
||||
|
return VideoFile{}, fmt.Errorf("parse video start timestamp %q: %w", name, err) |
||||
|
} |
||||
|
|
||||
|
end, err := time.ParseInLocation("060102150405", matches[1]+matches[3], time.Local) |
||||
|
if err != nil { |
||||
|
return VideoFile{}, fmt.Errorf("parse video end timestamp %q: %w", name, err) |
||||
|
} |
||||
|
if end.Before(start) { |
||||
|
end = end.Add(24 * time.Hour) |
||||
|
} |
||||
|
|
||||
|
return VideoFile{ |
||||
|
Filename: name, |
||||
|
StartTime: start, |
||||
|
EndTime: end, |
||||
|
Duration: end.Sub(start), |
||||
|
}, nil |
||||
|
} |
||||
|
|
||||
|
func mustRel(root, path string) string { |
||||
|
relPath, err := filepath.Rel(root, path) |
||||
|
if err != nil { |
||||
|
return path |
||||
|
} |
||||
|
return relPath |
||||
|
} |
||||
@ -0,0 +1,89 @@ |
|||||
|
package footage |
||||
|
|
||||
|
import ( |
||||
|
"path/filepath" |
||||
|
"testing" |
||||
|
"time" |
||||
|
) |
||||
|
|
||||
|
func TestScanIndexesFixtureFootage(t *testing.T) { |
||||
|
root := filepath.Join("..", "..", "testdata", "footage") |
||||
|
|
||||
|
days, err := Scan(root) |
||||
|
if err != nil { |
||||
|
t.Fatalf("scan fixture footage: %v", err) |
||||
|
} |
||||
|
|
||||
|
if len(days) != 2 { |
||||
|
t.Fatalf("expected 2 days, got %d", len(days)) |
||||
|
} |
||||
|
if days[0].Date != "20260102" || days[1].Date != "20260101" { |
||||
|
t.Fatalf("expected days sorted newest first, got %#v", []string{days[0].Date, days[1].Date}) |
||||
|
} |
||||
|
|
||||
|
day := days[1] |
||||
|
if len(day.Images) != 2 { |
||||
|
t.Fatalf("expected 2 images for %s, got %d", day.Date, len(day.Images)) |
||||
|
} |
||||
|
if got := day.Images[0].RelPath; got != filepath.Join("20260101", "images", "A26010112000001.jpg") { |
||||
|
t.Fatalf("unexpected first image path %q", got) |
||||
|
} |
||||
|
if got := day.Images[1].RelPath; got != filepath.Join("20260101", "images", "A26010112050001.jpg") { |
||||
|
t.Fatalf("unexpected second image path %q", got) |
||||
|
} |
||||
|
if !day.Images[0].Timestamp.Before(day.Images[1].Timestamp) { |
||||
|
t.Fatalf("expected images sorted by timestamp ascending") |
||||
|
} |
||||
|
|
||||
|
if len(day.Videos) != 2 { |
||||
|
t.Fatalf("expected 2 videos for %s, got %d", day.Date, len(day.Videos)) |
||||
|
} |
||||
|
if got := day.Videos[0].RelPath; got != filepath.Join("20260101", "record", "A260101_120000_120015.265") { |
||||
|
t.Fatalf("unexpected first video path %q", got) |
||||
|
} |
||||
|
if got := day.Videos[0].Duration; got != 15*time.Second { |
||||
|
t.Fatalf("expected first video duration 15s, got %s", got) |
||||
|
} |
||||
|
if !day.Videos[0].StartTime.Before(day.Videos[1].StartTime) { |
||||
|
t.Fatalf("expected videos sorted by start time ascending") |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestParseImageFilename(t *testing.T) { |
||||
|
image, err := parseImageFilename("A26010112000001.jpg") |
||||
|
if err != nil { |
||||
|
t.Fatalf("parse image filename: %v", err) |
||||
|
} |
||||
|
|
||||
|
if image.Filename != "A26010112000001.jpg" { |
||||
|
t.Fatalf("unexpected filename %q", image.Filename) |
||||
|
} |
||||
|
|
||||
|
want := time.Date(2026, time.January, 1, 12, 0, 0, 0, time.Local) |
||||
|
if !image.Timestamp.Equal(want) { |
||||
|
t.Fatalf("expected timestamp %s, got %s", want, image.Timestamp) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestParseVideoFilename(t *testing.T) { |
||||
|
video, err := parseVideoFilename("A260101_120000_120015.265") |
||||
|
if err != nil { |
||||
|
t.Fatalf("parse video filename: %v", err) |
||||
|
} |
||||
|
|
||||
|
if video.Filename != "A260101_120000_120015.265" { |
||||
|
t.Fatalf("unexpected filename %q", video.Filename) |
||||
|
} |
||||
|
if video.Duration != 15*time.Second { |
||||
|
t.Fatalf("expected duration 15s, got %s", video.Duration) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestParseFilenameRejectsUnknownPattern(t *testing.T) { |
||||
|
if _, err := parseImageFilename("camera.jpg"); err == nil { |
||||
|
t.Fatalf("expected invalid image filename to fail") |
||||
|
} |
||||
|
if _, err := parseVideoFilename("camera.265"); err == nil { |
||||
|
t.Fatalf("expected invalid video filename to fail") |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,257 @@ |
|||||
|
package image |
||||
|
|
||||
|
import ( |
||||
|
"fmt" |
||||
|
"html/template" |
||||
|
"net/http" |
||||
|
"net/url" |
||||
|
"path/filepath" |
||||
|
"sort" |
||||
|
"strconv" |
||||
|
"strings" |
||||
|
"time" |
||||
|
|
||||
|
"github.com/domagojzecevic/cammonitor/internal/auth" |
||||
|
"github.com/domagojzecevic/cammonitor/internal/config" |
||||
|
"github.com/domagojzecevic/cammonitor/internal/footage" |
||||
|
webtemplates "github.com/domagojzecevic/cammonitor/internal/web/templates" |
||||
|
"github.com/go-chi/chi/v5" |
||||
|
) |
||||
|
|
||||
|
type Handler struct { |
||||
|
cfg *config.Config |
||||
|
idx *footage.Index |
||||
|
thumbs *Cache |
||||
|
} |
||||
|
|
||||
|
type ShellData struct { |
||||
|
Title string |
||||
|
User *auth.User |
||||
|
Months []MonthGroup |
||||
|
CurrentDate string |
||||
|
ActiveTab string |
||||
|
Content any |
||||
|
} |
||||
|
|
||||
|
type MonthGroup struct { |
||||
|
Label string |
||||
|
Days []string |
||||
|
} |
||||
|
|
||||
|
type PageData struct { |
||||
|
Date string |
||||
|
Images []ImageItem |
||||
|
ActiveIndex int |
||||
|
PrevIndex int |
||||
|
NextIndex int |
||||
|
Current ImageItem |
||||
|
} |
||||
|
|
||||
|
type ImageItem struct { |
||||
|
Index int |
||||
|
Filename string |
||||
|
RelPath string |
||||
|
RawURL string |
||||
|
ThumbURL string |
||||
|
Active bool |
||||
|
} |
||||
|
|
||||
|
func NewHandler(cfg *config.Config, idx *footage.Index) *Handler { |
||||
|
return &Handler{ |
||||
|
cfg: cfg, |
||||
|
idx: idx, |
||||
|
thumbs: NewCache(defaultCacheEntries), |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) ServeRaw(w http.ResponseWriter, r *http.Request) { |
||||
|
absPath, ok := h.resolveRequestPath(w, r) |
||||
|
if !ok { |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
http.ServeFile(w, r, absPath) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) ServeThumb(w http.ResponseWriter, r *http.Request) { |
||||
|
absPath, ok := h.resolveRequestPath(w, r) |
||||
|
if !ok { |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
thumb, err := h.thumbs.Thumbnail(absPath) |
||||
|
if err != nil { |
||||
|
http.NotFound(w, r) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
w.Header().Set("Cache-Control", "max-age=3600") |
||||
|
w.Header().Set("Content-Type", "image/jpeg") |
||||
|
w.WriteHeader(http.StatusOK) |
||||
|
_, _ = w.Write(thumb) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) ServePage(w http.ResponseWriter, r *http.Request) { |
||||
|
date := chi.URLParam(r, "date") |
||||
|
day, ok := h.day(date) |
||||
|
if !ok { |
||||
|
http.NotFound(w, r) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
data := h.pageData(date, day.Images, parseIndex(r.URL.Query().Get("idx"), len(day.Images))) |
||||
|
h.render(w, r, ShellData{ |
||||
|
Title: "CamMonitor " + date + " images", |
||||
|
CurrentDate: date, |
||||
|
ActiveTab: "images", |
||||
|
Content: data, |
||||
|
}) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) pageData(date string, files []footage.ImageFile, active int) PageData { |
||||
|
items := make([]ImageItem, 0, len(files)) |
||||
|
for i, file := range files { |
||||
|
items = append(items, ImageItem{ |
||||
|
Index: i, |
||||
|
Filename: file.Filename, |
||||
|
RelPath: filepath.ToSlash(file.RelPath), |
||||
|
RawURL: "/raw/image/" + pathEscape(file.RelPath), |
||||
|
ThumbURL: "/thumb/image/" + pathEscape(file.RelPath), |
||||
|
Active: i == active, |
||||
|
}) |
||||
|
} |
||||
|
|
||||
|
page := PageData{ |
||||
|
Date: date, |
||||
|
Images: items, |
||||
|
ActiveIndex: active, |
||||
|
} |
||||
|
if len(items) > 0 { |
||||
|
page.PrevIndex = (active - 1 + len(items)) % len(items) |
||||
|
page.NextIndex = (active + 1) % len(items) |
||||
|
page.Current = items[active] |
||||
|
} |
||||
|
return page |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) resolveRequestPath(w http.ResponseWriter, r *http.Request) (string, bool) { |
||||
|
absPath, err := h.resolveRelPath(chi.URLParam(r, "*")) |
||||
|
if err != nil { |
||||
|
http.Error(w, "invalid image path", http.StatusBadRequest) |
||||
|
return "", false |
||||
|
} |
||||
|
return absPath, true |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) resolveRelPath(relPath string) (string, error) { |
||||
|
if h.cfg == nil || h.cfg.FootageRoot == "" { |
||||
|
return "", fmt.Errorf("missing footage root") |
||||
|
} |
||||
|
if relPath == "" { |
||||
|
return "", fmt.Errorf("missing path") |
||||
|
} |
||||
|
|
||||
|
clean := filepath.Clean(filepath.FromSlash(relPath)) |
||||
|
if clean == "." || clean == ".." || filepath.IsAbs(clean) || strings.HasPrefix(clean, ".."+string(filepath.Separator)) { |
||||
|
return "", fmt.Errorf("unsafe path") |
||||
|
} |
||||
|
|
||||
|
root, err := filepath.Abs(h.cfg.FootageRoot) |
||||
|
if err != nil { |
||||
|
return "", err |
||||
|
} |
||||
|
target, err := filepath.Abs(filepath.Join(root, clean)) |
||||
|
if err != nil { |
||||
|
return "", err |
||||
|
} |
||||
|
|
||||
|
rel, err := filepath.Rel(root, target) |
||||
|
if err != nil { |
||||
|
return "", err |
||||
|
} |
||||
|
if rel == ".." || strings.HasPrefix(rel, ".."+string(filepath.Separator)) { |
||||
|
return "", fmt.Errorf("path escapes footage root") |
||||
|
} |
||||
|
return target, nil |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) render(w http.ResponseWriter, r *http.Request, data ShellData) { |
||||
|
data.User, _ = auth.UserFromContext(r.Context()) |
||||
|
data.Months = groupDaysByMonth(h.dayList()) |
||||
|
|
||||
|
w.Header().Set("Content-Type", "text/html; charset=utf-8") |
||||
|
if err := imageTemplate.ExecuteTemplate(w, "base", data); err != nil { |
||||
|
http.Error(w, "render image page failed", http.StatusInternalServerError) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) dayList() []string { |
||||
|
if h.idx == nil { |
||||
|
return nil |
||||
|
} |
||||
|
return h.idx.DayList() |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) day(date string) (*footage.DayEntry, bool) { |
||||
|
if h.idx == nil { |
||||
|
return nil, false |
||||
|
} |
||||
|
return h.idx.Day(date) |
||||
|
} |
||||
|
|
||||
|
func parseIndex(value string, length int) int { |
||||
|
if length <= 0 { |
||||
|
return 0 |
||||
|
} |
||||
|
index, err := strconv.Atoi(value) |
||||
|
if err != nil || index < 0 || index >= length { |
||||
|
return 0 |
||||
|
} |
||||
|
return index |
||||
|
} |
||||
|
|
||||
|
func pathEscape(relPath string) string { |
||||
|
parts := strings.Split(filepath.ToSlash(relPath), "/") |
||||
|
for i, part := range parts { |
||||
|
parts[i] = url.PathEscape(part) |
||||
|
} |
||||
|
return strings.Join(parts, "/") |
||||
|
} |
||||
|
|
||||
|
func groupDaysByMonth(days []string) []MonthGroup { |
||||
|
groups := make(map[string][]string) |
||||
|
labels := make([]string, 0) |
||||
|
|
||||
|
for _, day := range days { |
||||
|
if len(day) != len("20060102") { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
parsed, err := time.Parse("20060102", day) |
||||
|
if err != nil { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
label := parsed.Format("2006-01") |
||||
|
if _, ok := groups[label]; !ok { |
||||
|
labels = append(labels, label) |
||||
|
} |
||||
|
groups[label] = append(groups[label], day) |
||||
|
} |
||||
|
|
||||
|
sort.Sort(sort.Reverse(sort.StringSlice(labels))) |
||||
|
monthGroups := make([]MonthGroup, 0, len(labels)) |
||||
|
for _, label := range labels { |
||||
|
monthGroups = append(monthGroups, MonthGroup{ |
||||
|
Label: label, |
||||
|
Days: groups[label], |
||||
|
}) |
||||
|
} |
||||
|
return monthGroups |
||||
|
} |
||||
|
|
||||
|
var imageTemplate = template.Must(template.ParseFS( |
||||
|
webtemplates.FS, |
||||
|
webtemplates.Base, |
||||
|
webtemplates.Images, |
||||
|
)) |
||||
@ -0,0 +1,175 @@ |
|||||
|
package image |
||||
|
|
||||
|
import ( |
||||
|
"bytes" |
||||
|
stdimage "image" |
||||
|
"image/color" |
||||
|
"image/jpeg" |
||||
|
"io" |
||||
|
"net/http" |
||||
|
"net/http/httptest" |
||||
|
"os" |
||||
|
"path/filepath" |
||||
|
"testing" |
||||
|
|
||||
|
"github.com/domagojzecevic/cammonitor/internal/config" |
||||
|
"github.com/domagojzecevic/cammonitor/internal/footage" |
||||
|
"github.com/go-chi/chi/v5" |
||||
|
) |
||||
|
|
||||
|
func TestThumbnailEndpointReturnsSmallJPEG(t *testing.T) { |
||||
|
root := createImageFixture(t) |
||||
|
index := footage.NewIndex(root, 0) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
router := imageRouter(root, index) |
||||
|
|
||||
|
request := httptest.NewRequest(http.MethodGet, "/thumb/image/20260101/images/A26010112000001.jpg", nil) |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
router.ServeHTTP(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusOK { |
||||
|
t.Fatalf("expected status %d, got %d: %s", http.StatusOK, response.Code, response.Body.String()) |
||||
|
} |
||||
|
if contentType := response.Header().Get("Content-Type"); contentType != "image/jpeg" { |
||||
|
t.Fatalf("expected image/jpeg content type, got %q", contentType) |
||||
|
} |
||||
|
if response.Body.Len() > 30*1024 { |
||||
|
t.Fatalf("expected thumbnail <= 30 KB, got %d bytes", response.Body.Len()) |
||||
|
} |
||||
|
|
||||
|
thumbnail, err := jpeg.Decode(bytes.NewReader(response.Body.Bytes())) |
||||
|
if err != nil { |
||||
|
t.Fatalf("decode thumbnail: %v", err) |
||||
|
} |
||||
|
bounds := thumbnail.Bounds() |
||||
|
if bounds.Dx() > 160 || bounds.Dy() > 90 { |
||||
|
t.Fatalf("expected thumbnail within 160x90, got %dx%d", bounds.Dx(), bounds.Dy()) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestRawEndpointServesOriginalFile(t *testing.T) { |
||||
|
root := createImageFixture(t) |
||||
|
originalPath := filepath.Join(root, "20260101", "images", "A26010112000001.jpg") |
||||
|
original, err := os.ReadFile(originalPath) |
||||
|
if err != nil { |
||||
|
t.Fatalf("read original: %v", err) |
||||
|
} |
||||
|
index := footage.NewIndex(root, 0) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
router := imageRouter(root, index) |
||||
|
|
||||
|
request := httptest.NewRequest(http.MethodGet, "/raw/image/20260101/images/A26010112000001.jpg", nil) |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
router.ServeHTTP(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusOK { |
||||
|
t.Fatalf("expected status %d, got %d: %s", http.StatusOK, response.Code, response.Body.String()) |
||||
|
} |
||||
|
served, err := io.ReadAll(response.Body) |
||||
|
if err != nil { |
||||
|
t.Fatalf("read response: %v", err) |
||||
|
} |
||||
|
if !bytes.Equal(served, original) { |
||||
|
t.Fatalf("expected raw endpoint to serve original bytes unchanged") |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestRawEndpointRejectsTraversal(t *testing.T) { |
||||
|
root := createImageFixture(t) |
||||
|
index := footage.NewIndex(root, 0) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
router := imageRouter(root, index) |
||||
|
|
||||
|
request := httptest.NewRequest(http.MethodGet, "/raw/image/%2e%2e/secret.jpg", nil) |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
router.ServeHTTP(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusBadRequest { |
||||
|
t.Fatalf("expected status %d, got %d", http.StatusBadRequest, response.Code) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func TestImagePageRendersViewerNavigation(t *testing.T) { |
||||
|
root := createImageFixture(t) |
||||
|
index := footage.NewIndex(root, 0) |
||||
|
t.Cleanup(index.Close) |
||||
|
|
||||
|
router := imageRouter(root, index) |
||||
|
|
||||
|
request := httptest.NewRequest(http.MethodGet, "/day/20260101/images?idx=1", nil) |
||||
|
response := httptest.NewRecorder() |
||||
|
|
||||
|
router.ServeHTTP(response, request) |
||||
|
|
||||
|
if response.Code != http.StatusOK { |
||||
|
t.Fatalf("expected status %d, got %d: %s", http.StatusOK, response.Code, response.Body.String()) |
||||
|
} |
||||
|
|
||||
|
body := response.Body.String() |
||||
|
for _, want := range []string{ |
||||
|
`data-image-browser`, |
||||
|
`data-active-index="1"`, |
||||
|
`/thumb/image/20260101/images/A26010112000001.jpg`, |
||||
|
`/raw/image/20260101/images/A26010112050001.jpg`, |
||||
|
`data-prev-index="0"`, |
||||
|
`data-next-index="0"`, |
||||
|
`keydown`, |
||||
|
`ArrowLeft`, |
||||
|
`ArrowRight`, |
||||
|
`ring-2 ring-indigo-400`, |
||||
|
} { |
||||
|
if !bytes.Contains(response.Body.Bytes(), []byte(want)) { |
||||
|
t.Fatalf("expected response to contain %q\nbody:\n%s", want, body) |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func imageRouter(root string, index *footage.Index) chi.Router { |
||||
|
handler := NewHandler(&config.Config{FootageRoot: root}, index) |
||||
|
router := chi.NewRouter() |
||||
|
router.Get("/raw/image/*", handler.ServeRaw) |
||||
|
router.Get("/thumb/image/*", handler.ServeThumb) |
||||
|
router.Get("/day/{date}/images", handler.ServePage) |
||||
|
return router |
||||
|
} |
||||
|
|
||||
|
func createImageFixture(t *testing.T) string { |
||||
|
t.Helper() |
||||
|
|
||||
|
root := t.TempDir() |
||||
|
imageDir := filepath.Join(root, "20260101", "images") |
||||
|
if err := os.MkdirAll(imageDir, 0o755); err != nil { |
||||
|
t.Fatalf("create image dir: %v", err) |
||||
|
} |
||||
|
|
||||
|
writeJPEG(t, filepath.Join(imageDir, "A26010112000001.jpg"), color.RGBA{R: 220, G: 40, B: 40, A: 255}) |
||||
|
writeJPEG(t, filepath.Join(imageDir, "A26010112050001.jpg"), color.RGBA{R: 40, G: 90, B: 220, A: 255}) |
||||
|
return root |
||||
|
} |
||||
|
|
||||
|
func writeJPEG(t *testing.T, path string, fill color.Color) { |
||||
|
t.Helper() |
||||
|
|
||||
|
img := stdimage.NewRGBA(stdimage.Rect(0, 0, 320, 180)) |
||||
|
for y := 0; y < img.Bounds().Dy(); y++ { |
||||
|
for x := 0; x < img.Bounds().Dx(); x++ { |
||||
|
img.Set(x, y, fill) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
file, err := os.Create(path) |
||||
|
if err != nil { |
||||
|
t.Fatalf("create jpeg %s: %v", path, err) |
||||
|
} |
||||
|
defer file.Close() |
||||
|
|
||||
|
if err := jpeg.Encode(file, img, &jpeg.Options{Quality: 90}); err != nil { |
||||
|
t.Fatalf("encode jpeg %s: %v", path, err) |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,114 @@ |
|||||
|
package image |
||||
|
|
||||
|
import ( |
||||
|
"bytes" |
||||
|
stdimage "image" |
||||
|
"image/jpeg" |
||||
|
"os" |
||||
|
"sync" |
||||
|
|
||||
|
xdraw "golang.org/x/image/draw" |
||||
|
) |
||||
|
|
||||
|
const ( |
||||
|
defaultCacheEntries = 500 |
||||
|
thumbnailWidth = 160 |
||||
|
thumbnailHeight = 90 |
||||
|
) |
||||
|
|
||||
|
type Cache struct { |
||||
|
mu sync.Mutex |
||||
|
max int |
||||
|
entries map[string][]byte |
||||
|
order []string |
||||
|
} |
||||
|
|
||||
|
func NewCache(max int) *Cache { |
||||
|
if max <= 0 { |
||||
|
max = defaultCacheEntries |
||||
|
} |
||||
|
return &Cache{ |
||||
|
max: max, |
||||
|
entries: make(map[string][]byte), |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func (c *Cache) Thumbnail(absPath string) ([]byte, error) { |
||||
|
if cached, ok := c.get(absPath); ok { |
||||
|
return cached, nil |
||||
|
} |
||||
|
|
||||
|
file, err := os.Open(absPath) |
||||
|
if err != nil { |
||||
|
return nil, err |
||||
|
} |
||||
|
defer file.Close() |
||||
|
|
||||
|
src, err := jpeg.Decode(file) |
||||
|
if err != nil { |
||||
|
return nil, err |
||||
|
} |
||||
|
|
||||
|
dst := resizeToFit(src, thumbnailWidth, thumbnailHeight) |
||||
|
var out bytes.Buffer |
||||
|
if err := jpeg.Encode(&out, dst, &jpeg.Options{Quality: 75}); err != nil { |
||||
|
return nil, err |
||||
|
} |
||||
|
|
||||
|
thumb := out.Bytes() |
||||
|
c.add(absPath, thumb) |
||||
|
return append([]byte(nil), thumb...), nil |
||||
|
} |
||||
|
|
||||
|
func (c *Cache) get(key string) ([]byte, bool) { |
||||
|
c.mu.Lock() |
||||
|
defer c.mu.Unlock() |
||||
|
|
||||
|
value, ok := c.entries[key] |
||||
|
if !ok { |
||||
|
return nil, false |
||||
|
} |
||||
|
return append([]byte(nil), value...), true |
||||
|
} |
||||
|
|
||||
|
func (c *Cache) add(key string, value []byte) { |
||||
|
c.mu.Lock() |
||||
|
defer c.mu.Unlock() |
||||
|
|
||||
|
if _, ok := c.entries[key]; !ok { |
||||
|
c.order = append(c.order, key) |
||||
|
} |
||||
|
c.entries[key] = append([]byte(nil), value...) |
||||
|
|
||||
|
for len(c.order) > c.max { |
||||
|
oldest := c.order[0] |
||||
|
c.order = c.order[1:] |
||||
|
delete(c.entries, oldest) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func resizeToFit(src stdimage.Image, maxWidth, maxHeight int) stdimage.Image { |
||||
|
bounds := src.Bounds() |
||||
|
width := bounds.Dx() |
||||
|
height := bounds.Dy() |
||||
|
if width <= 0 || height <= 0 { |
||||
|
return stdimage.NewRGBA(stdimage.Rect(0, 0, 1, 1)) |
||||
|
} |
||||
|
|
||||
|
targetWidth := maxWidth |
||||
|
targetHeight := height * targetWidth / width |
||||
|
if targetHeight > maxHeight { |
||||
|
targetHeight = maxHeight |
||||
|
targetWidth = width * targetHeight / height |
||||
|
} |
||||
|
if targetWidth < 1 { |
||||
|
targetWidth = 1 |
||||
|
} |
||||
|
if targetHeight < 1 { |
||||
|
targetHeight = 1 |
||||
|
} |
||||
|
|
||||
|
dst := stdimage.NewRGBA(stdimage.Rect(0, 0, targetWidth, targetHeight)) |
||||
|
xdraw.BiLinear.Scale(dst, dst.Bounds(), src, bounds, xdraw.Over, nil) |
||||
|
return dst |
||||
|
} |
||||
@ -0,0 +1,137 @@ |
|||||
|
package web |
||||
|
|
||||
|
import ( |
||||
|
"html/template" |
||||
|
"net/http" |
||||
|
"sort" |
||||
|
"time" |
||||
|
|
||||
|
"github.com/domagojzecevic/cammonitor/internal/auth" |
||||
|
"github.com/domagojzecevic/cammonitor/internal/footage" |
||||
|
webtemplates "github.com/domagojzecevic/cammonitor/internal/web/templates" |
||||
|
"github.com/go-chi/chi/v5" |
||||
|
) |
||||
|
|
||||
|
type Handler struct { |
||||
|
index *footage.Index |
||||
|
} |
||||
|
|
||||
|
type ShellData struct { |
||||
|
Title string |
||||
|
User *auth.User |
||||
|
Months []MonthGroup |
||||
|
CurrentDate string |
||||
|
ActiveTab string |
||||
|
Content any |
||||
|
} |
||||
|
|
||||
|
type MonthGroup struct { |
||||
|
Label string |
||||
|
Days []string |
||||
|
} |
||||
|
|
||||
|
type DayPageData struct { |
||||
|
Date string |
||||
|
ImageCount int |
||||
|
VideoCount int |
||||
|
} |
||||
|
|
||||
|
func NewHandler(index *footage.Index) *Handler { |
||||
|
return &Handler{index: index} |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) Index(w http.ResponseWriter, r *http.Request) { |
||||
|
days := h.dayList() |
||||
|
if len(days) == 0 { |
||||
|
h.render(w, r, ShellData{ |
||||
|
Title: "CamMonitor", |
||||
|
Content: DayPageData{ |
||||
|
Date: "No footage", |
||||
|
}, |
||||
|
}) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
http.Redirect(w, r, "/day/"+days[0]+"/images", http.StatusFound) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) DayOverview(w http.ResponseWriter, r *http.Request) { |
||||
|
date := chi.URLParam(r, "date") |
||||
|
day, ok := h.day(date) |
||||
|
if !ok { |
||||
|
http.NotFound(w, r) |
||||
|
return |
||||
|
} |
||||
|
|
||||
|
h.render(w, r, ShellData{ |
||||
|
Title: "CamMonitor " + date, |
||||
|
CurrentDate: date, |
||||
|
Content: DayPageData{ |
||||
|
Date: date, |
||||
|
ImageCount: len(day.Images), |
||||
|
VideoCount: len(day.Videos), |
||||
|
}, |
||||
|
}) |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) render(w http.ResponseWriter, r *http.Request, data ShellData) { |
||||
|
data.User, _ = auth.UserFromContext(r.Context()) |
||||
|
data.Months = groupDaysByMonth(h.dayList()) |
||||
|
|
||||
|
w.Header().Set("Content-Type", "text/html; charset=utf-8") |
||||
|
if err := shellTemplate.ExecuteTemplate(w, "base", data); err != nil { |
||||
|
http.Error(w, "render page failed", http.StatusInternalServerError) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) dayList() []string { |
||||
|
if h.index == nil { |
||||
|
return nil |
||||
|
} |
||||
|
return h.index.DayList() |
||||
|
} |
||||
|
|
||||
|
func (h *Handler) day(date string) (*footage.DayEntry, bool) { |
||||
|
if h.index == nil { |
||||
|
return nil, false |
||||
|
} |
||||
|
return h.index.Day(date) |
||||
|
} |
||||
|
|
||||
|
func groupDaysByMonth(days []string) []MonthGroup { |
||||
|
groups := make(map[string][]string) |
||||
|
labels := make([]string, 0) |
||||
|
|
||||
|
for _, day := range days { |
||||
|
if len(day) != len("20060102") { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
parsed, err := time.Parse("20060102", day) |
||||
|
if err != nil { |
||||
|
continue |
||||
|
} |
||||
|
|
||||
|
label := parsed.Format("2006-01") |
||||
|
if _, ok := groups[label]; !ok { |
||||
|
labels = append(labels, label) |
||||
|
} |
||||
|
groups[label] = append(groups[label], day) |
||||
|
} |
||||
|
|
||||
|
sort.Sort(sort.Reverse(sort.StringSlice(labels))) |
||||
|
monthGroups := make([]MonthGroup, 0, len(labels)) |
||||
|
for _, label := range labels { |
||||
|
monthGroups = append(monthGroups, MonthGroup{ |
||||
|
Label: label, |
||||
|
Days: groups[label], |
||||
|
}) |
||||
|
} |
||||
|
return monthGroups |
||||
|
} |
||||
|
|
||||
|
var shellTemplate = template.Must(template.ParseFS( |
||||
|
webtemplates.FS, |
||||
|
webtemplates.Base, |
||||
|
webtemplates.Day, |
||||
|
)) |
||||
@ -0,0 +1,39 @@ |
|||||
|
<!doctype html> |
||||
|
<html lang="en"> |
||||
|
<head> |
||||
|
<meta charset="utf-8"> |
||||
|
<meta name="viewport" content="width=device-width, initial-scale=1"> |
||||
|
<title>Users - CamMonitor</title> |
||||
|
<script src="https://cdn.tailwindcss.com"></script> |
||||
|
</head> |
||||
|
<body class="min-h-screen bg-slate-950 p-6 text-slate-100"> |
||||
|
<main class="mx-auto max-w-3xl space-y-6"> |
||||
|
<header class="flex items-center justify-between"> |
||||
|
<h1 class="text-2xl font-semibold">Users</h1> |
||||
|
<form method="post" action="/logout"><button class="rounded bg-slate-800 px-3 py-2">Sign out</button></form> |
||||
|
</header> |
||||
|
<form method="post" action="/admin/users" class="grid gap-3 md:grid-cols-[1fr_1fr_auto_auto]"> |
||||
|
<input name="username" placeholder="Username" class="rounded bg-slate-900 px-3 py-2 ring-1 ring-slate-700"> |
||||
|
<input name="password" type="password" placeholder="Password" class="rounded bg-slate-900 px-3 py-2 ring-1 ring-slate-700"> |
||||
|
<label class="flex items-center gap-2 text-sm"><input name="is_admin" type="checkbox"> Admin</label> |
||||
|
<button class="rounded bg-indigo-500 px-3 py-2 font-medium text-white">Add</button> |
||||
|
</form> |
||||
|
<table class="w-full border-collapse text-left"> |
||||
|
<thead><tr class="border-b border-slate-800"><th class="py-2">Username</th><th class="py-2">Role</th><th class="py-2"></th></tr></thead> |
||||
|
<tbody> |
||||
|
{{range .Users}} |
||||
|
<tr class="border-b border-slate-900"> |
||||
|
<td class="py-2">{{.Username}}</td> |
||||
|
<td class="py-2">{{if .IsAdmin}}admin{{else}}user{{end}}</td> |
||||
|
<td class="py-2 text-right"> |
||||
|
<form method="post" action="/admin/users/{{.ID}}/delete"> |
||||
|
<button class="rounded bg-slate-800 px-3 py-1">Delete</button> |
||||
|
</form> |
||||
|
</td> |
||||
|
</tr> |
||||
|
{{end}} |
||||
|
</tbody> |
||||
|
</table> |
||||
|
</main> |
||||
|
</body> |
||||
|
</html> |
||||
@ -0,0 +1,72 @@ |
|||||
|
{{define "base"}} |
||||
|
<!doctype html> |
||||
|
<html lang="en"> |
||||
|
<head> |
||||
|
<meta charset="utf-8"> |
||||
|
<meta name="viewport" content="width=device-width, initial-scale=1"> |
||||
|
<title>{{.Title}}</title> |
||||
|
<script src="https://cdn.tailwindcss.com"></script> |
||||
|
</head> |
||||
|
<body class="min-h-screen bg-slate-900 text-slate-100"> |
||||
|
<div class="flex min-h-screen"> |
||||
|
<aside class="hidden w-56 shrink-0 border-r border-slate-800 bg-slate-950 md:block"> |
||||
|
<div class="px-4 py-4"> |
||||
|
<a href="/" class="text-base font-semibold text-slate-100">CamMonitor</a> |
||||
|
</div> |
||||
|
<nav class="px-3 pb-6"> |
||||
|
{{range .Months}} |
||||
|
<div class="mt-5 first:mt-0"> |
||||
|
<div class="px-2 text-xs font-semibold uppercase tracking-wide text-slate-500">{{.Label}}</div> |
||||
|
<div class="mt-2 space-y-1"> |
||||
|
{{range .Days}} |
||||
|
<a href="/day/{{.}}" class="block rounded-md px-2 py-2 text-sm text-slate-300 hover:bg-slate-800 hover:text-white">{{.}}</a> |
||||
|
{{end}} |
||||
|
</div> |
||||
|
</div> |
||||
|
{{end}} |
||||
|
</nav> |
||||
|
</aside> |
||||
|
|
||||
|
<main class="flex min-h-screen flex-1 flex-col pb-16 md:pb-0"> |
||||
|
<header class="sticky top-0 z-10 border-b border-slate-800 bg-slate-900/95"> |
||||
|
<div class="flex h-14 items-center justify-between px-4 md:px-6"> |
||||
|
<div class="flex items-center gap-3"> |
||||
|
<details data-mobile-drawer class="relative md:hidden"> |
||||
|
<summary class="flex h-9 w-9 cursor-pointer list-none items-center justify-center rounded-md border border-slate-700 text-slate-100">☰</summary> |
||||
|
<div class="absolute left-0 top-11 z-30 w-72 border border-slate-800 bg-slate-950 p-4 shadow-xl"> |
||||
|
{{range .Months}} |
||||
|
<div class="mt-5 first:mt-0"> |
||||
|
<div class="text-xs font-semibold uppercase tracking-wide text-slate-500">{{.Label}}</div> |
||||
|
<div class="mt-2 space-y-1"> |
||||
|
{{range .Days}} |
||||
|
<a href="/day/{{.}}" class="block rounded-md px-2 py-2 text-sm text-slate-300 hover:bg-slate-800 hover:text-white">{{.}}</a> |
||||
|
{{end}} |
||||
|
</div> |
||||
|
</div> |
||||
|
{{end}} |
||||
|
</div> |
||||
|
</details> |
||||
|
<a href="/" class="text-base font-semibold text-slate-100 md:hidden">CamMonitor</a> |
||||
|
</div> |
||||
|
<div class="flex items-center gap-3 text-sm text-slate-300"> |
||||
|
{{with .User}}<span>{{.Username}}</span>{{end}} |
||||
|
<form method="post" action="/logout"> |
||||
|
<button type="submit" class="rounded-md border border-slate-700 px-3 py-1.5 text-sm text-slate-100 hover:bg-slate-800">Logout</button> |
||||
|
</form> |
||||
|
</div> |
||||
|
</div> |
||||
|
</header> |
||||
|
|
||||
|
<section class="flex-1 px-4 py-6 md:px-8"> |
||||
|
{{template "content" .}} |
||||
|
</section> |
||||
|
</main> |
||||
|
</div> |
||||
|
|
||||
|
<nav class="fixed inset-x-0 bottom-0 z-20 grid grid-cols-2 border-t border-slate-800 bg-slate-950/95 md:hidden"> |
||||
|
<a href="{{if .CurrentDate}}/day/{{.CurrentDate}}/images{{else}}/{{end}}" class="px-4 py-3 text-center text-sm font-medium text-slate-200">Images</a> |
||||
|
<a href="{{if .CurrentDate}}/day/{{.CurrentDate}}/videos{{else}}/{{end}}" class="px-4 py-3 text-center text-sm font-medium text-slate-200">Videos</a> |
||||
|
</nav> |
||||
|
</body> |
||||
|
</html> |
||||
|
{{end}} |
||||
@ -0,0 +1,16 @@ |
|||||
|
{{define "content"}} |
||||
|
{{with .Content}} |
||||
|
<div class="mx-auto max-w-5xl"> |
||||
|
<div class="flex flex-col gap-4 sm:flex-row sm:items-end sm:justify-between"> |
||||
|
<div> |
||||
|
<h1 class="text-2xl font-semibold text-slate-50">{{.Date}}</h1> |
||||
|
<p class="mt-1 text-sm text-slate-400">Footage overview</p> |
||||
|
</div> |
||||
|
<div class="flex rounded-md border border-slate-800 bg-slate-950 p-1"> |
||||
|
<a href="/day/{{.Date}}/images" class="rounded px-3 py-2 text-sm font-medium text-slate-100 hover:bg-slate-800">Images ({{.ImageCount}})</a> |
||||
|
<a href="/day/{{.Date}}/videos" class="rounded px-3 py-2 text-sm font-medium text-slate-100 hover:bg-slate-800">Videos ({{.VideoCount}})</a> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
{{end}} |
||||
|
{{end}} |
||||
@ -0,0 +1,58 @@ |
|||||
|
{{define "content"}} |
||||
|
{{with .Content}} |
||||
|
<div data-image-browser data-active-index="{{.ActiveIndex}}" class="flex h-full min-h-[calc(100vh-7rem)] flex-col gap-4"> |
||||
|
<div class="flex items-center justify-between gap-3"> |
||||
|
<div> |
||||
|
<h1 class="text-lg font-semibold text-slate-100">{{.Date}}</h1> |
||||
|
<p class="text-sm text-slate-400">Images</p> |
||||
|
</div> |
||||
|
{{if .Images}} |
||||
|
<div class="flex items-center gap-2"> |
||||
|
<a href="/day/{{.Date}}/images?idx={{.PrevIndex}}" data-prev-index="{{.PrevIndex}}" class="rounded-md border border-slate-700 px-3 py-2 text-sm font-medium text-slate-100 hover:bg-slate-800">Prev</a> |
||||
|
<a href="/day/{{.Date}}/images?idx={{.NextIndex}}" data-next-index="{{.NextIndex}}" class="rounded-md border border-slate-700 px-3 py-2 text-sm font-medium text-slate-100 hover:bg-slate-800">Next</a> |
||||
|
</div> |
||||
|
{{end}} |
||||
|
</div> |
||||
|
|
||||
|
{{if .Images}} |
||||
|
<div class="h-28 shrink-0 overflow-x-auto border-y border-slate-800 py-3"> |
||||
|
<div class="flex h-full gap-3"> |
||||
|
{{range .Images}} |
||||
|
<a href="/day/{{$.Content.Date}}/images?idx={{.Index}}" class="h-full w-40 shrink-0 overflow-hidden rounded-md border border-slate-800 bg-slate-950 {{if .Active}}ring-2 ring-indigo-400{{end}}"> |
||||
|
<img src="{{.ThumbURL}}" alt="{{.Filename}}" class="h-full w-full object-cover"> |
||||
|
</a> |
||||
|
{{end}} |
||||
|
</div> |
||||
|
</div> |
||||
|
|
||||
|
<div class="relative min-h-0 flex-1 overflow-hidden bg-black"> |
||||
|
<img src="{{.Current.RawURL}}" alt="{{.Current.Filename}}" class="h-full max-h-[calc(100vh-15rem)] min-h-[18rem] w-full object-contain"> |
||||
|
<a href="/day/{{.Date}}/images?idx={{.PrevIndex}}" class="absolute left-3 top-1/2 -translate-y-1/2 rounded-md bg-slate-950/80 px-3 py-2 text-sm font-medium text-white hover:bg-slate-900">Prev</a> |
||||
|
<a href="/day/{{.Date}}/images?idx={{.NextIndex}}" class="absolute right-3 top-1/2 -translate-y-1/2 rounded-md bg-slate-950/80 px-3 py-2 text-sm font-medium text-white hover:bg-slate-900">Next</a> |
||||
|
</div> |
||||
|
|
||||
|
<script> |
||||
|
(() => { |
||||
|
const root = document.querySelector("[data-image-browser]"); |
||||
|
if (!root) return; |
||||
|
const active = Number(root.dataset.activeIndex || "0"); |
||||
|
const prev = root.querySelector("[data-prev-index]")?.dataset.prevIndex || "0"; |
||||
|
const next = root.querySelector("[data-next-index]")?.dataset.nextIndex || "0"; |
||||
|
const go = (index) => { |
||||
|
const url = new URL(window.location.href); |
||||
|
url.searchParams.set("idx", index); |
||||
|
window.location.href = url.toString(); |
||||
|
}; |
||||
|
window.history.replaceState({ idx: active }, "", window.location.href); |
||||
|
window.addEventListener("keydown", (event) => { |
||||
|
if (event.key === "ArrowLeft") go(prev); |
||||
|
if (event.key === "ArrowRight") go(next); |
||||
|
}); |
||||
|
})(); |
||||
|
</script> |
||||
|
{{else}} |
||||
|
<div class="border border-slate-800 bg-slate-950 p-6 text-sm text-slate-400">No images for this day.</div> |
||||
|
{{end}} |
||||
|
</div> |
||||
|
{{end}} |
||||
|
{{end}} |
||||
@ -0,0 +1,25 @@ |
|||||
|
<!doctype html> |
||||
|
<html lang="en"> |
||||
|
<head> |
||||
|
<meta charset="utf-8"> |
||||
|
<meta name="viewport" content="width=device-width, initial-scale=1"> |
||||
|
<title>Login - CamMonitor</title> |
||||
|
<script src="https://cdn.tailwindcss.com"></script> |
||||
|
</head> |
||||
|
<body class="min-h-screen bg-slate-950 text-slate-100"> |
||||
|
<main class="mx-auto flex min-h-screen max-w-sm items-center px-6"> |
||||
|
<form method="post" action="/login" class="w-full space-y-4"> |
||||
|
<h1 class="text-2xl font-semibold">CamMonitor</h1> |
||||
|
<label class="block space-y-1"> |
||||
|
<span class="text-sm text-slate-300">Username</span> |
||||
|
<input name="username" autocomplete="username" class="w-full rounded bg-slate-900 px-3 py-2 text-slate-100 ring-1 ring-slate-700"> |
||||
|
</label> |
||||
|
<label class="block space-y-1"> |
||||
|
<span class="text-sm text-slate-300">Password</span> |
||||
|
<input name="password" type="password" autocomplete="current-password" class="w-full rounded bg-slate-900 px-3 py-2 text-slate-100 ring-1 ring-slate-700"> |
||||
|
</label> |
||||
|
<button type="submit" class="w-full rounded bg-indigo-500 px-3 py-2 font-medium text-white">Sign in</button> |
||||
|
</form> |
||||
|
</main> |
||||
|
</body> |
||||
|
</html> |
||||
@ -0,0 +1,16 @@ |
|||||
|
package templates |
||||
|
|
||||
|
import "embed" |
||||
|
|
||||
|
const ( |
||||
|
Login = "login.html" |
||||
|
AdminUsers = "admin_users.html" |
||||
|
Base = "base.html" |
||||
|
Day = "day.html" |
||||
|
Images = "images.html" |
||||
|
) |
||||
|
|
||||
|
// FS exposes file-backed HTML templates for handlers that render web pages.
|
||||
|
//
|
||||
|
//go:embed *.html
|
||||
|
var FS embed.FS |
||||
@ -0,0 +1 @@ |
|||||
|
fixture |
||||
@ -0,0 +1 @@ |
|||||
|
fixture |
||||
@ -0,0 +1 @@ |
|||||
|
fixture |
||||
@ -0,0 +1 @@ |
|||||
|
fixture |
||||
@ -0,0 +1 @@ |
|||||
|
fixture |
||||
Loading…
Reference in new issue