uploading files and a lot more

middleware/auth.go

@@ -12,15 +12,6 @@ import (
 	"github.com/uptrace/bun"
 )
 
-// import (
-// 	"database/sql"
-// 	"net/http"
-
-// 	"github.com/go-pg/pg/v10"
-
-// 	"github.com/labstack/echo/v4"
-// )
-
 const UserContextKey = "user"
 
 func SessionMiddleware(db *bun.DB) echo.MiddlewareFunc {
@@ -46,7 +37,7 @@ func SessionMiddleware(db *bun.DB) echo.MiddlewareFunc {
 			session := &models.Session{
 				ID: sessionId,
 			}
-			err = db.NewSelect().Model(session).Relation("User").WherePK().Scan(context.Background())
+			err = db.NewSelect().Model(session).WherePK().Scan(context.Background())
 
 			if err != nil {
 				fmt.Println(err)
@@ -56,7 +47,18 @@ func SessionMiddleware(db *bun.DB) echo.MiddlewareFunc {
 				return echo.NewHTTPError(http.StatusInternalServerError, "Database error")
 			}
 
-			user := &session.User
+			user := &models.User{
+				ID: session.UserID,
+			}
+			err = db.NewSelect().Model(user).Relation("Plan").WherePK().Scan(context.Background())
+
+			if err != nil {
+				if err == sql.ErrNoRows {
+					return echo.NewHTTPError(http.StatusUnauthorized, "Invalid session token")
+				}
+				fmt.Println(err)
+				return echo.NewHTTPError(http.StatusInternalServerError, "Database error")
+			}
 
 			// Store the user in the context
 			c.Set(UserContextKey, user)

middleware/route.go

@@ -0,0 +1,49 @@
+package middleware
+
+import (
+	"net/http"
+	"strings"
+
+	"github.com/labstack/echo/v4"
+)
+
+var unauthenticatedPages = []string{
+	"/login",
+	"/signup",
+	"/",
+}
+
+var authenticatedPages = []string{
+	"/home",
+}
+
+func AuthCheckMiddleware(next echo.HandlerFunc) echo.HandlerFunc {
+	return func(c echo.Context) error {
+		path := c.Request().URL.Path
+		_, cookieErr := c.Cookie("sessionToken")
+		authenticated := cookieErr == nil
+
+		if Contains(unauthenticatedPages, path) && authenticated {
+			return c.Redirect(http.StatusFound, "/home")
+		}
+
+		if Contains(authenticatedPages, path) && !authenticated {
+			return c.Redirect(http.StatusFound, "/login")
+		}
+
+		if strings.Contains(path, "/home") && !authenticated {
+			return c.Redirect(http.StatusFound, "/login")
+		}
+
+		return next(c)
+	}
+}
+
+func Contains(s []string, element string) bool {
+	for _, v := range s {
+		if v == element {
+			return true
+		}
+	}
+	return false
+}