rowt/src/rest/auth.rs

use rocket::{
    form::Form,
    get, post,
    request::FlashMessage,
    response::{status, Flash, Redirect},
    routes, FromForm, Responder, Route, State,
};
use rocket_dyn_templates::{context, tera, Template};
use sqlx::SqlitePool;

use crate::model::user::{self, User};

#[get("/")]
async fn index(flash: Option<FlashMessage<'_>>) -> Template {
    let mut context = tera::Context::new();

    if let Some(msg) = flash {
        context.insert("flash", &msg.into_inner());
    }

    Template::render("auth/login", context.into_json())
}

#[derive(FromForm)]
struct LoginForm {
    name: String,
    password: String,
}

#[post("/", data = "<login>")]
async fn login(login: Form<LoginForm>, db: &State<SqlitePool>) -> Flash<Redirect> {
    let user = User::login(db, login.name.clone(), login.password.clone()).await;

    //TODO: be able to use for find_by_name. This would get rid of the following match clause.
    let user = match user {
        Ok(user) => user,
        Err(_) => {
            return Flash::error(Redirect::to("/auth"), "Falscher Benutzername/Passwort");
        }
    };

    Flash::success(Redirect::to("/"), "Login erfolgreich")
}

pub fn routes() -> Vec<Route> {
    routes![index, login]
}