Redirect user after successful login

src/controllers/base_controller.rs

@@ -0,0 +1,8 @@
+use actix_web::HttpResponse;
+
+/// Create a redirect user response
+pub fn redirect_user(uri: &str) -> HttpResponse {
+    HttpResponse::Found()
+        .append_header(("Location", uri))
+        .finish()
+}

src/controllers/login_controller.rs

@@ -6,6 +6,8 @@ use askama::Template;
 use crate::actors::users_actor::{LoginResult, UsersActor};
 use crate::actors::users_actor;
 use crate::constants::APP_NAME;
+use crate::controllers::base_controller::redirect_user;
+use crate::data::session_identity::SessionIdentity;
 
 #[derive(Template)]
 #[template(path = "base_login_page.html")]
@@ -36,16 +38,34 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
     let mut danger = String::new();
     let mut login = String::new();
 
+    // Check if user is already authenticated
+    if SessionIdentity::is_authenticated(&id) {
+        return redirect_user("/");
+    }
+
     // Try to authenticate user
     if let Some(req) = &req {
+        // TODO : check request origin
+
         login = req.login.clone();
         let response: LoginResult = users.send(users_actor::LoginRequest {
             login: login.clone(),
             password: req.password.clone(),
         }).await.unwrap();
 
-        // TODO : save auth in case of successful authentication
-        danger = format!("{:?}", response)
+        match response {
+            LoginResult::Success(user) => {
+                id.remember(SessionIdentity::from_user(&user).serialize());
+
+                return redirect_user("/");
+            }
+
+            c => {
+                // TODO : add bruteforce detection
+                log::warn!("Failed login for username {} : {:?}", login, c);
+                danger = "Login failed.".to_string();
+            }
+        }
     }
 
 

src/controllers/mod.rs

@@ -1,2 +1,3 @@
 pub mod assets_controller;
-pub mod login_controller;
+pub mod login_controller;
+pub mod base_controller;

src/data/mod.rs

@@ -1,4 +1,5 @@
 pub mod app_config;
 pub mod user;
 pub mod service;
-pub mod entity_manager;
+pub mod entity_manager;
+pub mod session_identity;

src/data/session_identity.rs

@@ -0,0 +1,40 @@
+use std::fmt::Display;
+
+use actix_identity::Identity;
+
+use crate::data::user::User;
+
+pub struct SessionIdentity {
+    pub id: String,
+    pub is_admin: bool,
+}
+
+impl SessionIdentity {
+    pub fn from_user(user: &User) -> Self {
+        Self {
+            id: user.uid.clone(),
+            is_admin: user.admin,
+        }
+    }
+
+    pub fn deserialize<D: Display>(input: D) -> Self {
+        let input = input.to_string();
+        let mut iter = input.split('-');
+        Self {
+            id: iter.next().unwrap_or_default().to_string(),
+            is_admin: iter.next().unwrap_or_default() == "true",
+        }
+    }
+
+    pub fn serialize(&self) -> String {
+        format!("{}-{}", self.id, self.is_admin)
+    }
+
+    pub fn is_authenticated(i: &Identity) -> bool {
+        i.identity()
+            .as_ref()
+            .map(Self::deserialize)
+            .map(|s| !s.id.is_empty())
+            .unwrap_or(false)
+    }
+}