mirror of
https://github.com/ssep1ol/overleaf-registration-be.git
synced 2026-07-21 20:40:21 +00:00
First commit
This commit is contained in:
44
handlers.go
44
handlers.go
@@ -3,6 +3,7 @@ package main
|
|||||||
import (
|
import (
|
||||||
"encoding/json"
|
"encoding/json"
|
||||||
"fmt"
|
"fmt"
|
||||||
|
"log"
|
||||||
"net/http"
|
"net/http"
|
||||||
"os"
|
"os"
|
||||||
"strings"
|
"strings"
|
||||||
@@ -15,12 +16,6 @@ type RegistrationRequest struct {
|
|||||||
}
|
}
|
||||||
|
|
||||||
func registerHandler(w http.ResponseWriter, r *http.Request) {
|
func registerHandler(w http.ResponseWriter, r *http.Request) {
|
||||||
// Allow only POST requests
|
|
||||||
if r.Method != http.MethodPost {
|
|
||||||
http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
// Parse the request body
|
// Parse the request body
|
||||||
var req RegistrationRequest
|
var req RegistrationRequest
|
||||||
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
|
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
|
||||||
@@ -28,7 +23,10 @@ func registerHandler(w http.ResponseWriter, r *http.Request) {
|
|||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
// Validate email
|
log.Printf("Received email: %s", req.Email)
|
||||||
|
log.Printf("Received CAPTCHA token: %s", req.Captcha)
|
||||||
|
|
||||||
|
// Validate email domain
|
||||||
if !validateEmailDomain(req.Email) {
|
if !validateEmailDomain(req.Email) {
|
||||||
http.Error(w, "Email domain is not allowed", http.StatusBadRequest)
|
http.Error(w, "Email domain is not allowed", http.StatusBadRequest)
|
||||||
return
|
return
|
||||||
@@ -37,43 +35,17 @@ func registerHandler(w http.ResponseWriter, r *http.Request) {
|
|||||||
// Validate Turnstile token
|
// Validate Turnstile token
|
||||||
valid, err := validateRecaptcha(req.Captcha)
|
valid, err := validateRecaptcha(req.Captcha)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
log.Printf("CAPTCHA validation failed: %v", err)
|
||||||
http.Error(w, fmt.Sprintf("CAPTCHA validation failed: %v", err), http.StatusInternalServerError)
|
http.Error(w, fmt.Sprintf("CAPTCHA validation failed: %v", err), http.StatusInternalServerError)
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
if !valid {
|
if !valid {
|
||||||
|
log.Println("Invalid CAPTCHA token.")
|
||||||
http.Error(w, "Invalid CAPTCHA", http.StatusUnauthorized)
|
http.Error(w, "Invalid CAPTCHA", http.StatusUnauthorized)
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
// Initialize Overleaf instance
|
// Continue with Overleaf registration (omitted for brevity)
|
||||||
baseURL := os.Getenv("OL_INSTANCE")
|
|
||||||
if baseURL == "" {
|
|
||||||
http.Error(w, "OL_INSTANCE is not set", http.StatusInternalServerError)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
overleaf := NewOverleaf(baseURL)
|
|
||||||
|
|
||||||
// Admin login using environment variables
|
|
||||||
adminEmail := os.Getenv("OL_ADMIN_EMAIL")
|
|
||||||
adminPassword := os.Getenv("OL_ADMIN_PASSWORD")
|
|
||||||
if adminEmail == "" || adminPassword == "" {
|
|
||||||
http.Error(w, "OL_ADMIN_EMAIL or OL_ADMIN_PASSWORD is not set", http.StatusInternalServerError)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
if err := overleaf.Login(adminEmail, adminPassword); err != nil {
|
|
||||||
http.Error(w, fmt.Sprintf("Admin login failed: %v", err), http.StatusInternalServerError)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
// Create the user in Overleaf
|
|
||||||
if err := overleaf.RegisterUser(req.Email); err != nil {
|
|
||||||
http.Error(w, fmt.Sprintf("Failed to create user: %v", err), http.StatusInternalServerError)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
// Respond with success
|
|
||||||
w.Header().Set("Content-Type", "application/json")
|
|
||||||
w.WriteHeader(http.StatusOK)
|
w.WriteHeader(http.StatusOK)
|
||||||
json.NewEncoder(w).Encode(map[string]string{
|
json.NewEncoder(w).Encode(map[string]string{
|
||||||
"message": "User registered successfully. Please check your email to set your password.",
|
"message": "User registered successfully. Please check your email to set your password.",
|
||||||
|
|||||||
40
recaptcha.go
40
recaptcha.go
@@ -1,7 +1,6 @@
|
|||||||
package main
|
package main
|
||||||
|
|
||||||
import (
|
import (
|
||||||
"bytes"
|
|
||||||
"encoding/json"
|
"encoding/json"
|
||||||
"fmt"
|
"fmt"
|
||||||
"log"
|
"log"
|
||||||
@@ -10,37 +9,36 @@ import (
|
|||||||
)
|
)
|
||||||
|
|
||||||
func validateRecaptcha(token string) (bool, error) {
|
func validateRecaptcha(token string) (bool, error) {
|
||||||
log.Printf("Validating Turnstile token: %s", token)
|
|
||||||
secret := os.Getenv("TURNSTILE_SECRET_KEY")
|
secret := os.Getenv("TURNSTILE_SECRET_KEY")
|
||||||
if secret == "" {
|
if secret == "" {
|
||||||
return false, fmt.Errorf("TURNSTILE_SECRET_KEY is not set")
|
return false, fmt.Errorf("TURNSTILE_SECRET_KEY is not set")
|
||||||
}
|
}
|
||||||
|
|
||||||
url := "https://challenges.cloudflare.com/turnstile/v0/siteverify"
|
log.Printf("Validating CAPTCHA token: %s", token)
|
||||||
payload := map[string]string{
|
|
||||||
"secret": secret,
|
|
||||||
"response": token,
|
|
||||||
}
|
|
||||||
payloadBytes, _ := json.Marshal(payload)
|
|
||||||
|
|
||||||
resp, err := http.Post(url, "application/json", bytes.NewBuffer(payloadBytes))
|
url := "https://challenges.cloudflare.com/turnstile/v0/siteverify"
|
||||||
|
data := map[string][]string{
|
||||||
|
"secret": {secret},
|
||||||
|
"response": {token},
|
||||||
|
}
|
||||||
|
|
||||||
|
resp, err := http.PostForm(url, data)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return false, fmt.Errorf("Turnstile API request failed: %v", err)
|
return false, fmt.Errorf("failed to verify CAPTCHA: %v", err)
|
||||||
}
|
}
|
||||||
defer resp.Body.Close()
|
defer resp.Body.Close()
|
||||||
|
|
||||||
var result map[string]interface{}
|
if resp.StatusCode != http.StatusOK {
|
||||||
|
return false, fmt.Errorf("unexpected status code: %d", resp.StatusCode)
|
||||||
|
}
|
||||||
|
|
||||||
|
var result struct {
|
||||||
|
Success bool `json:"success"`
|
||||||
|
}
|
||||||
if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
|
if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
|
||||||
return false, fmt.Errorf("Failed to parse Turnstile API response: %v", err)
|
return false, fmt.Errorf("failed to decode CAPTCHA response: %v", err)
|
||||||
}
|
}
|
||||||
|
|
||||||
success, ok := result["success"].(bool)
|
log.Printf("CAPTCHA validation result: %v", result.Success)
|
||||||
if !ok || !success {
|
return result.Success, nil
|
||||||
if errors, exists := result["error-codes"]; exists {
|
|
||||||
return false, fmt.Errorf("Turnstile validation failed: %v", errors)
|
|
||||||
}
|
|
||||||
return false, fmt.Errorf("Turnstile validation failed")
|
|
||||||
}
|
|
||||||
|
|
||||||
return true, nil
|
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user