main.go

package main

import (
	"encoding/base64"
	"log"
	"net/http"
	"os"
	"time"

	"github.com/gorilla/mux"
	"github.com/gorilla/securecookie"
	"github.com/gorilla/sessions"
	abclientstate "github.com/volatiletech/authboss-clientstate"
	"github.com/zoe-gonzales/meet-up-do-stuff/api"
	"github.com/zoe-gonzales/meet-up-do-stuff/auth"
	"github.com/zoe-gonzales/meet-up-do-stuff/user"
)

func main() {
	cookieKey := base64.StdEncoding.EncodeToString(securecookie.GenerateRandomKey(64))
	sessionKey := base64.StdEncoding.EncodeToString(securecookie.GenerateRandomKey(64))
	cookieStoreKey, _ := base64.StdEncoding.DecodeString(cookieKey)
	sessionStoreKey, _ := base64.StdEncoding.DecodeString(sessionKey)
	auth.CookieStore = abclientstate.NewCookieStorer(cookieStoreKey, nil)
	auth.CookieStore.HTTPOnly = false
	auth.CookieStore.Secure = false
	auth.SessionStore = abclientstate.NewSessionStorer(auth.SessionCookieName, sessionStoreKey, nil)
	cstore := auth.SessionStore.Store.(*sessions.CookieStore)
	cstore.Options.HttpOnly = false
	cstore.Options.Secure = false
	cstore.MaxAge(int((30 * 24 * time.Hour) / time.Second))

	user.InitUserModel()
	auth.InitAuth()

	r := mux.NewRouter()

	// public endpoints
	r.HandleFunc("/login", api.AuthenticateUser).Methods("POST")
	r.HandleFunc("/signup", api.RegisterNewUser).Methods("POST")
	r.HandleFunc("/logout", api.LogOutUser).Methods("POST")
	r.HandleFunc("/profile/{id}", api.GetProfile).Methods("GET")
	r.HandleFunc("/events", api.GetAllEvents).Methods("GET")
	r.HandleFunc("/events/{id}", api.GetSingleEvent).Methods("GET")

	// Restricted endpoints
	s := r.PathPrefix("/user/{userID}").Subrouter()
	s.Use(auth.VerifyCookie)
	s.HandleFunc("/event/{id}", api.GetSingleEvent).Methods("GET")
	s.HandleFunc("/eventsbyowner", api.GetEventsByOwners).Methods("GET")
	s.HandleFunc("/events", api.GetUsersEvents).Methods("GET")
	s.HandleFunc("/profile/{id}", api.UpdateProfile).Methods("PUT")
	s.HandleFunc("/", api.GetUserByID).Methods("GET")
	s.HandleFunc("/account", api.UpdateUserDetails).Methods("PUT")
	s.HandleFunc("/account", api.DeleteUser).Methods("DELETE")
	s.HandleFunc("/event", api.AddEvent).Methods("POST")
	s.HandleFunc("/event/{id}", api.UpdateEvent).Methods("PUT")
	s.HandleFunc("/event/{id}", api.DeleteEvent).Methods("DELETE")

	port := os.Getenv("PORT")
	if port == "" {
		port = "8080"
	}

	// static files
	r.PathPrefix("/").Handler(http.StripPrefix("/web", http.FileServer(http.Dir("./web"))))
	http.Handle("/", r)

	log.Fatal(http.ListenAndServe(":"+port, r))
}