feat(webui): add password reset page

#20

pkg/webui/accountsIdResetPassword.go

@@ -0,0 +1,87 @@
+package webui
+
+import (
+	"html/template"
+	"net/http"
+
+	"git.adyxax.org/adyxax/tfstated/pkg/database"
+	"git.adyxax.org/adyxax/tfstated/pkg/model"
+	"go.n16f.net/uuid"
+)
+
+type AccountsIdResetPasswordPage struct {
+	Account         *model.Account
+	Page            *Page
+	PasswordInvalid bool
+	PasswordChanged bool
+	Token           string
+}
+
+var accountsIdResetPasswordTemplates = template.Must(template.ParseFS(htmlFS, "html/base.html", "html/accountsIdResetPassword.html"))
+
+func processAccountsIdResetPasswordPathValues(db *database.DB, w http.ResponseWriter, r *http.Request) (*model.Account, bool) {
+	var accountId uuid.UUID
+	if err := accountId.Parse(r.PathValue("id")); err != nil {
+		errorResponse(w, r, http.StatusBadRequest, err)
+		return nil, false
+	}
+	var token uuid.UUID
+	if err := token.Parse(r.PathValue("token")); err != nil {
+		errorResponse(w, r, http.StatusBadRequest, err)
+		return nil, false
+	}
+	account, err := db.LoadAccountById(accountId)
+	if err != nil {
+		errorResponse(w, r, http.StatusInternalServerError, err)
+		return nil, false
+	}
+	if account == nil || account.PasswordReset == nil {
+		errorResponse(w, r, http.StatusBadRequest, err)
+		return nil, false
+	}
+	if !account.PasswordReset.Equal(token) {
+		errorResponse(w, r, http.StatusBadRequest, err)
+		return nil, false
+	}
+	return account, true
+}
+
+func handleAccountsIdResetPasswordGET(db *database.DB) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		account, valid := processAccountsIdResetPasswordPathValues(db, w, r)
+		if !valid {
+			return
+		}
+		render(w, accountsIdResetPasswordTemplates, http.StatusOK,
+			AccountsIdResetPasswordPage{
+				Account: account,
+				Page:    &Page{Title: "Password Reset", Section: "reset"},
+				Token:   r.PathValue("token"),
+			})
+	})
+}
+
+func handleAccountsIdResetPasswordPOST(db *database.DB) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		account, valid := processAccountsIdResetPasswordPathValues(db, w, r)
+		if !valid {
+			return
+		}
+		password := r.FormValue("password")
+		if len(password) < 8 {
+			errorResponse(w, r, http.StatusBadRequest, nil)
+			return
+		}
+		account.SetPassword(password)
+		if err := db.SaveAccount(account); err != nil {
+			errorResponse(w, r, http.StatusInternalServerError, err)
+			return
+		}
+		render(w, accountsIdResetPasswordTemplates, http.StatusOK,
+			AccountsIdResetPasswordPage{
+				Account:         account,
+				Page:            &Page{Title: "Password Reset", Section: "reset"},
+				PasswordChanged: true,
+			})
+	})
+}