<%
# API
my $api = gitprep_api;
# Operator
my $op = param('op') || '';
# DBI
my $dbi = $self->app->dbi;
# Errors
my $error;
# Login
if ($op eq 'login') {
# Paramerters
my $id = param('id');
my $password = param('password');
# Validator
my $vc = app->vc;
# Validation result
my $validation = $vc->validation;
# "id"
$id = '' unless defined $id;
# "user" and "password"
$password = '' unless defined $password;
my $user = $dbi->model('user')->select(
['row_id', 'password', 'salt', 'admin'],
where => {id => $id}
)->one;
if (!$user) {
$validation->add_failed("User name or password is wrong");
}
else {
my $is_valid = $api->check_password(
$password,
$user->{salt},
$user->{password}
);
if (!$is_valid) {
$validation->add_failed("User name or password is wrong");
}
}
if ($validation->is_valid) {
# Login success
my $password_encrypted = $user->{password};
my $admin = $user->{admin};
session(user_row_id => $user->{row_id});
session(password => $password_encrypted);
# 2 weeks save
session(expiration => 60 * 60 * 24 * 14);
# Go to admin page
if ($admin) {
$self->redirect_to('/_admin');
return 1;
}
# Go to user page
else {
$self->redirect_to("/$id");
return 1;
}
}
else { $error = 'User name or password is wrong' }
}
%>
% layout 'common', title => 'Login';