First commit

This commit is contained in:
corrado.mulas
2024-11-20 03:03:09 +01:00
parent 0ceca43b23
commit 1e9dbb2b82
2 changed files with 27 additions and 57 deletions

View File

@@ -3,6 +3,7 @@ package main
import ( import (
"encoding/json" "encoding/json"
"fmt" "fmt"
"log"
"net/http" "net/http"
"os" "os"
"strings" "strings"
@@ -15,12 +16,6 @@ type RegistrationRequest struct {
} }
func registerHandler(w http.ResponseWriter, r *http.Request) { func registerHandler(w http.ResponseWriter, r *http.Request) {
// Allow only POST requests
if r.Method != http.MethodPost {
http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
return
}
// Parse the request body // Parse the request body
var req RegistrationRequest var req RegistrationRequest
if err := json.NewDecoder(r.Body).Decode(&req); err != nil { if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
@@ -28,7 +23,10 @@ func registerHandler(w http.ResponseWriter, r *http.Request) {
return return
} }
// Validate email log.Printf("Received email: %s", req.Email)
log.Printf("Received CAPTCHA token: %s", req.Captcha)
// Validate email domain
if !validateEmailDomain(req.Email) { if !validateEmailDomain(req.Email) {
http.Error(w, "Email domain is not allowed", http.StatusBadRequest) http.Error(w, "Email domain is not allowed", http.StatusBadRequest)
return return
@@ -37,43 +35,17 @@ func registerHandler(w http.ResponseWriter, r *http.Request) {
// Validate Turnstile token // Validate Turnstile token
valid, err := validateRecaptcha(req.Captcha) valid, err := validateRecaptcha(req.Captcha)
if err != nil { if err != nil {
log.Printf("CAPTCHA validation failed: %v", err)
http.Error(w, fmt.Sprintf("CAPTCHA validation failed: %v", err), http.StatusInternalServerError) http.Error(w, fmt.Sprintf("CAPTCHA validation failed: %v", err), http.StatusInternalServerError)
return return
} }
if !valid { if !valid {
log.Println("Invalid CAPTCHA token.")
http.Error(w, "Invalid CAPTCHA", http.StatusUnauthorized) http.Error(w, "Invalid CAPTCHA", http.StatusUnauthorized)
return return
} }
// Initialize Overleaf instance // Continue with Overleaf registration (omitted for brevity)
baseURL := os.Getenv("OL_INSTANCE")
if baseURL == "" {
http.Error(w, "OL_INSTANCE is not set", http.StatusInternalServerError)
return
}
overleaf := NewOverleaf(baseURL)
// Admin login using environment variables
adminEmail := os.Getenv("OL_ADMIN_EMAIL")
adminPassword := os.Getenv("OL_ADMIN_PASSWORD")
if adminEmail == "" || adminPassword == "" {
http.Error(w, "OL_ADMIN_EMAIL or OL_ADMIN_PASSWORD is not set", http.StatusInternalServerError)
return
}
if err := overleaf.Login(adminEmail, adminPassword); err != nil {
http.Error(w, fmt.Sprintf("Admin login failed: %v", err), http.StatusInternalServerError)
return
}
// Create the user in Overleaf
if err := overleaf.RegisterUser(req.Email); err != nil {
http.Error(w, fmt.Sprintf("Failed to create user: %v", err), http.StatusInternalServerError)
return
}
// Respond with success
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(http.StatusOK) w.WriteHeader(http.StatusOK)
json.NewEncoder(w).Encode(map[string]string{ json.NewEncoder(w).Encode(map[string]string{
"message": "User registered successfully. Please check your email to set your password.", "message": "User registered successfully. Please check your email to set your password.",

View File

@@ -1,7 +1,6 @@
package main package main
import ( import (
"bytes"
"encoding/json" "encoding/json"
"fmt" "fmt"
"log" "log"
@@ -10,37 +9,36 @@ import (
) )
func validateRecaptcha(token string) (bool, error) { func validateRecaptcha(token string) (bool, error) {
log.Printf("Validating Turnstile token: %s", token)
secret := os.Getenv("TURNSTILE_SECRET_KEY") secret := os.Getenv("TURNSTILE_SECRET_KEY")
if secret == "" { if secret == "" {
return false, fmt.Errorf("TURNSTILE_SECRET_KEY is not set") return false, fmt.Errorf("TURNSTILE_SECRET_KEY is not set")
} }
url := "https://challenges.cloudflare.com/turnstile/v0/siteverify" log.Printf("Validating CAPTCHA token: %s", token)
payload := map[string]string{
"secret": secret,
"response": token,
}
payloadBytes, _ := json.Marshal(payload)
resp, err := http.Post(url, "application/json", bytes.NewBuffer(payloadBytes)) url := "https://challenges.cloudflare.com/turnstile/v0/siteverify"
data := map[string][]string{
"secret": {secret},
"response": {token},
}
resp, err := http.PostForm(url, data)
if err != nil { if err != nil {
return false, fmt.Errorf("Turnstile API request failed: %v", err) return false, fmt.Errorf("failed to verify CAPTCHA: %v", err)
} }
defer resp.Body.Close() defer resp.Body.Close()
var result map[string]interface{} if resp.StatusCode != http.StatusOK {
return false, fmt.Errorf("unexpected status code: %d", resp.StatusCode)
}
var result struct {
Success bool `json:"success"`
}
if err := json.NewDecoder(resp.Body).Decode(&result); err != nil { if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
return false, fmt.Errorf("Failed to parse Turnstile API response: %v", err) return false, fmt.Errorf("failed to decode CAPTCHA response: %v", err)
} }
success, ok := result["success"].(bool) log.Printf("CAPTCHA validation result: %v", result.Success)
if !ok || !success { return result.Success, nil
if errors, exists := result["error-codes"]; exists {
return false, fmt.Errorf("Turnstile validation failed: %v", errors)
}
return false, fmt.Errorf("Turnstile validation failed")
}
return true, nil
} }