implement user accounts and login

2 files changed, 34 insertions, 1 deletions

diff --git a/routes/homepage.php b/routes/homepage.php
index c147d67..db8ea72 100644
--- a/routes/homepage.php
+++ b/routes/homepage.php
@@ -5,7 +5,8 @@ use Digitigrade\HttpResponseStatus\TemporaryRedirect;
 use Digitigrade\Router;
 
 Router::getInstance()->mount('/', function (array $args) {
-    if (str_contains($_SERVER['HTTP_ACCEPT'] ?? '', 'text/html')) {
+    $accept = $_SERVER['HTTP_ACCEPT'] ?? '';
+    if (str_contains($accept, 'text/html') || str_contains($accept, '*/*')) {
         throw new TemporaryRedirect('/feed/global');
     }
     throw new NotFound();
diff --git a/routes/user_auth.php b/routes/user_auth.php
new file mode 100644
index 0000000..afdf8d8
--- /dev/null
+++ b/routes/user_auth.php
@@ -0,0 +1,32 @@
+<?php
+
+use Digitigrade\HttpResponseStatus\TemporaryRedirect;
+use Digitigrade\Model\Session;
+use Digitigrade\Model\UserAccount;
+use Digitigrade\Router;
+
+Router::getInstance()->mount('/login', function (array $args) {
+    if (UserAccount::findByCurrentSession() != null) {
+        // already logged in
+        throw new TemporaryRedirect('/');
+    }
+    $failedVerification = false;
+    if (isset($_POST['email'], $_POST['password'])) {
+        $failedVerification = true;
+        // try to log in?
+        $user = UserAccount::findByEmail($_POST['email']);
+        if ($user?->verifyPassword($_POST['password'])) {
+            // success
+            $session = Session::create($user);
+            $session->setCookie(isset($_POST['rememberSession']));
+            throw new TemporaryRedirect('/');
+        }
+    }
+
+    if (isset($_SERVER['HTTP_HX_CURRENT_URL']) && str_ends_with($_SERVER['HTTP_HX_CURRENT_URL'], '/login')) {
+        // htmx form submission, therefore just return the form itself
+        render_template('login_form', ['email' => $_POST['email'] ?? '', 'failed' => $failedVerification]);
+    } else {
+        render_template('login_page', ['email' => $_POST['email'] ?? '', 'failed' => $failedVerification]);
+    }
+});
\ No newline at end of file