mathiasandClaude Opus 4.8
e7c2e575d3
Authentik owns invites now (infra ADR-0001). Delete adapters/dex, the /invite set-password UI, the tapir invite CLI, the InvitationStore/ DexPasswordCreator ports + App wiring, the invite Templ pages, and the invite Taskfile target. New users are invited via Authentik, log in via OIDC, and hit the existing /register gate. invitations table (mig 009) left in place (append-only; harmless). task check green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
55 lines
1.7 KiB
Go
55 lines
1.7 KiB
Go
package web
|
|
|
|
import "net/http"
|
|
|
|
// flashCookie carries a one-shot notification code between a POST→redirect and
|
|
// the next rendered page (PRG pattern). The value is a non-sensitive code (not
|
|
// user data), so it is not signed; HttpOnly + SameSite=Lax + a short MaxAge bound
|
|
// it. The flashBanner component maps the code to a styled message.
|
|
const flashCookie = "tapir_flash"
|
|
|
|
// Flash codes. Kept small and stable — the message + severity live in
|
|
// flashMessages (view.go), not here, so the cookie never carries free text.
|
|
const (
|
|
flashConnected = "connected"
|
|
flashConnectFailed = "connect_failed"
|
|
flashDisconnected = "disconnected"
|
|
flashDeleted = "deleted"
|
|
flashRegistered = "registered"
|
|
)
|
|
|
|
// flashMaxAge bounds how long an unread flash lingers (seconds). Long enough to
|
|
// survive the redirect, short enough that a stale banner never reappears.
|
|
const flashMaxAge = 60
|
|
|
|
// setFlash queues a one-shot notification surfaced by the next full page render.
|
|
func setFlash(w http.ResponseWriter, code string) {
|
|
http.SetCookie(w, &http.Cookie{
|
|
Name: flashCookie,
|
|
Value: code,
|
|
Path: "/",
|
|
MaxAge: flashMaxAge,
|
|
HttpOnly: true,
|
|
SameSite: http.SameSiteLaxMode,
|
|
})
|
|
}
|
|
|
|
// takeFlash returns the pending flash code (if any) and clears the cookie so the
|
|
// banner shows exactly once. Call it only on full-page renders, not HTMX
|
|
// fragments, so a fragment swap never consumes a flash meant for the next page.
|
|
func takeFlash(w http.ResponseWriter, r *http.Request) string {
|
|
c, err := r.Cookie(flashCookie)
|
|
if err != nil || c.Value == "" {
|
|
return ""
|
|
}
|
|
http.SetCookie(w, &http.Cookie{
|
|
Name: flashCookie,
|
|
Value: "",
|
|
Path: "/",
|
|
MaxAge: -1,
|
|
HttpOnly: true,
|
|
SameSite: http.SameSiteLaxMode,
|
|
})
|
|
return c.Value
|
|
}
|