Can redirect user on successful login

src/controllers/base_controller.rs

@@ -1,8 +1,22 @@
+use std::fmt::Display;
+
 use actix_web::HttpResponse;
 
+use crate::constants::LOGIN_ROUTE;
+
 /// Create a redirect user response
 pub fn redirect_user(uri: &str) -> HttpResponse {
     HttpResponse::Found()
         .append_header(("Location", uri))
         .finish()
-}
+}
+
+/// Redirect user to authenticate him
+pub fn redirect_user_for_login<P: Display>(redirect_uri: P) -> HttpResponse {
+    HttpResponse::Found()
+        .append_header((
+            "Location",
+            format!("{}?redirect={}", LOGIN_ROUTE, urlencoding::encode(&redirect_uri.to_string()))
+        ))
+        .finish()
+}

src/controllers/login_controller.rs

@@ -16,6 +16,7 @@ struct BaseLoginPage {
     success: String,
     page_title: &'static str,
     app_name: &'static str,
+    redirect_uri: String,
 }
 
 #[derive(Template)]
@@ -41,6 +42,7 @@ pub struct LoginRequestBody {
 #[derive(serde::Deserialize)]
 pub struct LoginRequestQuery {
     logout: Option<bool>,
+    redirect: Option<String>,
 }
 
 /// Authenticate user
@@ -52,6 +54,14 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
     let mut success = String::new();
     let mut login = String::new();
 
+    let redirect_uri = match query.redirect.as_deref() {
+        None => "/",
+        Some(s) => match s.starts_with('/') && !s.starts_with("//") {
+            true => s,
+            false => "/",
+        }
+    };
+
     // Check if user session must be closed
     if let Some(true) = query.logout {
         id.forget();
@@ -60,7 +70,7 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
 
     // Check if user is already authenticated
     if SessionIdentity(&id).is_authenticated() {
-        return redirect_user("/");
+        return redirect_user(redirect_uri);
     }
 
     // Check if user is setting a new  password
@@ -78,7 +88,7 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
                 danger = "Failed to change password!".to_string();
             } else {
                 SessionIdentity(&id).set_status(SessionStatus::SignedIn);
-                return redirect_user("/");
+                return redirect_user(redirect_uri);
             }
         }
     }
@@ -100,7 +110,7 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
                 if user.need_reset_password {
                     SessionIdentity(&id).set_status(SessionStatus::NeedNewPassword);
                 } else {
-                    return redirect_user("/");
+                    return redirect_user(redirect_uri);
                 }
             }
 
@@ -122,6 +132,7 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
                     danger,
                     success,
                     app_name: APP_NAME,
+                    redirect_uri: urlencoding::encode(redirect_uri).to_string(),
                 },
                 min_pass_len: MIN_PASS_LEN,
             }.render().unwrap());
@@ -136,6 +147,7 @@ pub async fn login_route(users: web::Data<Addr<UsersActor>>,
                 danger,
                 success,
                 app_name: APP_NAME,
+                redirect_uri: urlencoding::encode(redirect_uri).to_string(),
             },
             login,
         }.render().unwrap())