add auth via auth0

Author: Gitznik

.env.example

@@ -12,3 +12,8 @@ DATABASE_URL=postgres://postgres:password@localhost:5432/robswebhub?sslmode=disa
 # APP_ENVIRONMENT=production
 # APP_APPLICATION__HOST=0.0.0.0
 # APP_APPLICATION__PORT=8080
+
+AUTH0_DOMAIN=...
+AUTH0_CLIENT_ID=...
+AUTH0_CLIENT_SECRET=...
+AUTH0_CALLBACK_URL=...

.github/workflows/go.yml

@@ -145,14 +145,6 @@ jobs:
           templ generate
           sqlc generate
 
-      - name: Run go fmt
-        run: |
-          if [ "$(gofmt -s -l . | wc -l)" -gt 0 ]; then
-            echo "The following files are not formatted:"
-            gofmt -s -l .
-            exit 1
-          fi
-
       - name: Run go vet
         run: go vet ./...
 
@@ -165,8 +157,10 @@ jobs:
       - name: Check templ formatting
         run: |
           templ fmt .
+          gofmt -l -w .
+          goimports -w .
           if [ -n "$(git status --porcelain)" ]; then
-            echo "templ files are not formatted. Please run 'templ fmt .'"
+            echo "Files are not formatted."
             git diff
             exit 1
           fi

.pre-commit-config.yaml

@@ -22,27 +22,11 @@ repos:
       # First: Always generate code
       - id: generate-code
         name: Generate code (templ & sqlc)
-        entry: bash -c 'templ generate && sqlc generate'
+        entry: bash -c 'templ generate && sqlc generate && templ fmt . && gofmt -l -w . && goimports -w .'
         language: system
         pass_filenames: false
         always_run: true
 
-      # Then: Format code
-      - id: go-fmt
-        name: Format Go code
-        entry: bash -c 'gofmt -l -w . && goimports -w .'
-        language: system
-        types: [go]
-        pass_filenames: false
-
-      # Then: Format templ files
-      - id: templ-fmt
-        name: Format templ files
-        entry: bash -c 'templ fmt .'
-        language: system
-        pass_filenames: false
-        files: '\.templ$'
-
       # Then: Check and tidy modules
       - id: go-mod-tidy
         name: Tidy go modules

cmd/server/main.go

@@ -2,6 +2,7 @@ package main
 
 import (
 	"context"
+	"encoding/gob"
 	"log"
 	"net/http"
 	"os"
@@ -11,11 +12,15 @@ import (
 
 	"github.com/getsentry/sentry-go"
 	sentrygin "github.com/getsentry/sentry-go/gin"
+	"github.com/gin-contrib/sessions"
+	"github.com/gin-contrib/sessions/cookie"
 
 	"github.com/gin-gonic/gin"
+	"github.com/gitznik/robswebhub/internal/auth"
 	"github.com/gitznik/robswebhub/internal/config"
 	"github.com/gitznik/robswebhub/internal/database"
 	"github.com/gitznik/robswebhub/internal/handlers"
+	"github.com/gitznik/robswebhub/internal/middleware"
 )
 
 func main() {
@@ -58,7 +63,11 @@ func main() {
 	queries := database.New(db)
 
 	// Setup Gin router
-	router := setupRouter(cfg, queries)
+	auth, err := auth.New(&cfg.Auth)
+	if err != nil {
+		log.Fatalf("Could not setup authenticator: %v", err)
+	}
+	router := setupRouter(cfg, queries, auth)
 
 	// Create HTTP server
 	srv := &http.Server{
@@ -90,7 +99,7 @@ func main() {
 	log.Print("Server exiting")
 }
 
-func setupRouter(cfg *config.Config, queries *database.Queries) *gin.Engine {
+func setupRouter(cfg *config.Config, queries *database.Queries, auth *auth.Authenticator) *gin.Engine {
 	// Set Gin mode based on environment
 	if os.Getenv("APP_ENVIRONMENT") == "production" {
 		gin.SetMode(gin.ReleaseMode)
@@ -99,13 +108,20 @@ func setupRouter(cfg *config.Config, queries *database.Queries) *gin.Engine {
 	router := gin.Default()
 	router.Use(sentrygin.New(sentrygin.Options{Repanic: true}))
 
+	// Setup Auth
+	gob.Register(map[string]interface{}{})
+
+	store := cookie.NewStore([]byte("secret"))
+	router.Use(sessions.Sessions("auth-session", store))
+	router.Use(middleware.LoginStatus)
+
 	// Serve static files
 	router.Static("/static", "./static")
 	router.Static("/images", "./static/images")
 	router.StaticFile("/favicon.ico", "./static/images/favicon.ico")
 
 	// Create handlers
-	h := handlers.New(queries)
+	h := handlers.New(queries, cfg)
 
 	// Routes
 	router.GET("/", h.Home)
@@ -123,5 +139,14 @@ func setupRouter(cfg *config.Config, queries *database.Queries) *gin.Engine {
 		scores.GET("/chart/:id", h.ScoresChart)
 	}
 
+	router.GET("/login", h.MakeLogin(auth))
+	router.GET("/logout", h.Logout)
+	router.GET("/callback", h.MakeCallback(auth))
+	scoresV2 := router.Group("/scoresV2")
+	scoresV2.Use(middleware.IsAuthenticated)
+	{
+		scoresV2.GET("", h.ScoresIndex)
+	}
+
 	return router
 }

go.mod

@@ -1,14 +1,16 @@
 module github.com/gitznik/robswebhub
 
-go 1.23.0
+go 1.24.0
 
 toolchain go1.24.3
 
 require (
 	github.com/a-h/templ v0.3.943
+	github.com/coreos/go-oidc/v3 v3.15.0
 	github.com/getsentry/sentry-go v0.35.1
 	github.com/getsentry/sentry-go/gin v0.35.1
-	github.com/gin-gonic/gin v1.9.1
+	github.com/gin-contrib/sessions v1.0.4
+	github.com/gin-gonic/gin v1.10.1
 	github.com/go-echarts/go-echarts/v2 v2.3.3
 	github.com/golang-migrate/migrate/v4 v4.19.0
 	github.com/google/uuid v1.6.0
@@ -18,16 +20,17 @@ require (
 	github.com/spf13/viper v1.18.2
 	github.com/testcontainers/testcontainers-go v0.38.0
 	github.com/testcontainers/testcontainers-go/modules/postgres v0.38.0
+	golang.org/x/oauth2 v0.31.0
 )
 
 require (
 	dario.cat/mergo v1.0.1 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/bytedance/sonic v1.10.2 // indirect
+	github.com/bytedance/sonic v1.13.2 // indirect
+	github.com/bytedance/sonic/loader v0.2.4 // indirect
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
-	github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect
-	github.com/chenzhuoyu/iasm v0.9.1 // indirect
+	github.com/cloudwego/base64x v0.1.5 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
@@ -41,16 +44,20 @@ require (
 	github.com/ebitengine/purego v0.8.4 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fsnotify/fsnotify v1.7.0 // indirect
-	github.com/gabriel-vasile/mimetype v1.4.3 // indirect
-	github.com/gin-contrib/sse v0.1.0 // indirect
+	github.com/gabriel-vasile/mimetype v1.4.8 // indirect
+	github.com/gin-contrib/sse v1.0.0 // indirect
+	github.com/go-jose/go-jose/v4 v4.1.1 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-ole/go-ole v1.2.6 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
-	github.com/go-playground/validator/v10 v10.20.0 // indirect
-	github.com/goccy/go-json v0.10.2 // indirect
+	github.com/go-playground/validator/v10 v10.26.0 // indirect
+	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/gorilla/context v1.1.2 // indirect
+	github.com/gorilla/securecookie v1.1.2 // indirect
+	github.com/gorilla/sessions v1.4.0 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
@@ -60,7 +67,7 @@ require (
 	github.com/jackc/puddle/v2 v2.2.1 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/klauspost/compress v1.18.0 // indirect
-	github.com/klauspost/cpuid/v2 v2.2.6 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.10 // indirect
 	github.com/leodido/go-urn v1.4.0 // indirect
 	github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
 	github.com/magiconair/properties v1.8.10 // indirect
@@ -78,7 +85,7 @@ require (
 	github.com/morikuni/aec v1.0.0 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/opencontainers/image-spec v1.1.1 // indirect
-	github.com/pelletier/go-toml/v2 v2.2.2 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
@@ -104,7 +111,7 @@ require (
 	go.opentelemetry.io/otel/sdk v1.37.0 // indirect
 	go.opentelemetry.io/otel/trace v1.37.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/arch v0.6.0 // indirect
+	golang.org/x/arch v0.16.0 // indirect
 	golang.org/x/crypto v0.40.0 // indirect
 	golang.org/x/exp v0.0.0-20240103183307-be819d1f06fc // indirect
 	golang.org/x/net v0.42.0 // indirect