+7

legit/routes/auth.go

··· 20 auth, ok := session.Values["authenticated"].(bool) 21 22 if !ok || !auth { 0 23 http.Redirect(w, r, "/login", http.StatusTemporaryRedirect) 24 return 25 } ··· 58 } 59 60 log.Println("successfully refreshed token") 0 0 0 0 0 0 61 } 62 63 next.ServeHTTP(w, r)

··· 20 auth, ok := session.Values["authenticated"].(bool) 21 22 if !ok || !auth { 23 + log.Printf("not logged in, redirecting") 24 http.Redirect(w, r, "/login", http.StatusTemporaryRedirect) 25 return 26 } ··· 59 } 60 61 log.Println("successfully refreshed token") 62 + } 63 + 64 + if r.URL.Path == "/login" { 65 + log.Println("already logged in") 66 + http.Redirect(w, r, "/", http.StatusTemporaryRedirect) 67 + return 68 } 69 70 next.ServeHTTP(w, r)

+5 -2

legit/routes/handler.go

··· 60 auth: auth, 61 } 62 63 - r.Get("/login", h.Login) 64 - r.Post("/login", h.Login) 0 0 0 65 r.Get("/static/{file}", h.ServeStatic) 66 67 r.Route("/repo", func(r chi.Router) {

··· 60 auth: auth, 61 } 62 63 + r.Group(func(r chi.Router) { 64 + r.Use(h.AuthMiddleware) 65 + r.Get("/login", h.Login) 66 + r.Post("/login", h.Login) 67 + }) 68 r.Get("/static/{file}", h.ServeStatic) 69 70 r.Route("/repo", func(r chi.Router) {

+2 -2

legit/routes/routes.go

··· 463 } 464 465 log.Printf("successfully saved session for %s (%s)", atSession.Handle, atSession.Did) 466 - w.Header().Set("HX-Redirect", "/") 467 - w.WriteHeader(http.StatusOK) 468 } 469 } 470

··· 463 } 464 465 log.Printf("successfully saved session for %s (%s)", atSession.Handle, atSession.Did) 466 + http.Redirect(w, r, "/", http.StatusPermanentRedirect) 467 + return 468 } 469 } 470