77 lines
1.8 KiB
Go
77 lines
1.8 KiB
Go
package auth
|
|
|
|
import (
|
|
"net/url"
|
|
"nixcn-cms/pkgs/authcode"
|
|
"nixcn-cms/pkgs/email"
|
|
"nixcn-cms/pkgs/turnstile"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/spf13/viper"
|
|
)
|
|
|
|
type MagicRequest struct {
|
|
ClientId string `json:"client_id"`
|
|
RedirectUri string `json:"redirect_uri"`
|
|
State string `json:"state"`
|
|
Email string `json:"email"`
|
|
TurnstileToken string `json:"turnstile_token"`
|
|
}
|
|
|
|
func Magic(c *gin.Context) {
|
|
// Parse request
|
|
var req MagicRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(400, gin.H{"error": "invalid request"})
|
|
return
|
|
}
|
|
|
|
// Cloudflare turnstile
|
|
ok, err := turnstile.VerifyTurnstile(req.TurnstileToken, c.ClientIP())
|
|
if err != nil || !ok {
|
|
c.JSON(403, gin.H{"error": "turnstile failed"})
|
|
return
|
|
}
|
|
|
|
code, err := authcode.NewAuthCode(req.Email)
|
|
if err != nil {
|
|
c.JSON(500, gin.H{"status": "code gen failed"})
|
|
}
|
|
|
|
externalUrl := viper.GetString("server.external_url")
|
|
url, err := url.Parse(externalUrl)
|
|
if err != nil {
|
|
c.JSON(500, gin.H{"status": "invalid external url"})
|
|
}
|
|
|
|
url.Path = "/api/v1/auth/redirect"
|
|
query := url.Query()
|
|
query.Set("code", code)
|
|
query.Set("redirect_uri", req.RedirectUri)
|
|
query.Set("state", req.State)
|
|
url.RawQuery = query.Encode()
|
|
|
|
debugMode := viper.GetBool("server.debug_mode")
|
|
if debugMode {
|
|
c.JSON(200, gin.H{"status": "magiclink sent", "uri": url.String()})
|
|
return
|
|
} else {
|
|
// Send email using resend
|
|
resend, err := email.NewResendClient()
|
|
if err != nil {
|
|
log.Error(err)
|
|
c.JSON(500, gin.H{"status": "invalid email config"})
|
|
return
|
|
}
|
|
resend.Send(
|
|
req.Email,
|
|
"NixCN CMS Email Verify",
|
|
"<p>Click the link below to verify your email. This link will expire in 10 minutes.</p><a href="+url.String()+">"+url.String()+"</a>",
|
|
)
|
|
}
|
|
|
|
c.JSON(200, gin.H{"status": "magic link sent"})
|
|
}
|