diff options
| author |  Tom Willemse | 2013-06-23 21:13:36 +0200 |
|---|---|---|
| committer | Tom Willemse | 2013-06-23 21:13:36 +0200 |
| commit | 5deba1e60defc6ea2cd6bc0bb7e86f0cb70ed516 (patch) | |
| tree | 315f50f42535d993e1cbb6e18d4fa8723544dee9 | |
| parent | 8aa9bcb7d5fd80592868a6eebedc40bb0c775ef7 (diff) | |
| download | scrumelo-5deba1e60defc6ea2cd6bc0bb7e86f0cb70ed516.tar.gz scrumelo-5deba1e60defc6ea2cd6bc0bb7e86f0cb70ed516.zip | |
Add login page
Nothing is yet done with the information, but it should soon.
| -rw-r--r-- | js/login.js | 12 | ||||
| -rw-r--r-- | scrumelo.el | 54 |
2 files changed, 66 insertions, 0 deletions
diff --git a/js/login.js b/js/login.js new file mode 100644 index 0000000..bbd2a19 --- /dev/null +++ b/js/login.js @@ -0,0 +1,12 @@ +function login () +{ + navigator.id.get(function(assertion) { + if (assertion) { + var assertion_field = + document.getElementById("assertion-field"); + assertion_field.value = assertion; + var login_form = document.getElementById("login-form"); + login_form.submit(); + } + }); +} diff --git a/scrumelo.el b/scrumelo.el index 1adf0f5..6908217 100644 --- a/scrumelo.el +++ b/scrumelo.el @@ -191,6 +191,57 @@ saving the buffer." #'scrumelo--org-entry-to-list nil nil 'comment)))))) +(defun scrumelo--verify-credentials (audience assertion) + "Make sure AUDIENCE and ASSERTION are correct." + (let ((url-request-extra-headers '(("Content-Type" . "application/json"))) + (url-request-data (json-encode `(("assertion" . ,assertion) + ("audience" . ,audience)))) + (url-request-method "POST") + result) + (with-current-buffer + (url-retrieve-synchronously "https://verifier.login.persona.org/verify") + (goto-char (point-min)) + (search-forward "\n\n") + (setq result (json-read)) + (kill-buffer)) + result)) + +(defun scrumelo-login-page (httpcon) + "Show a login link for persona for HTTPCON." + (elnode-method httpcon + (GET + (elnode-http-start httpcon 200 '("Content-Type" . "text/html")) + (elnode-http-return + httpcon + (concat + "<!DOCTYPE html>\n" + (sxml-to-xml + '(html (@ (lang "en")) + (head (meta (@ (charset "utf-8"))) + (title "Login") + (script (@ (src "https://login.persona.org/include.js")) "") + (script (@ (src "/js/login.js")) "")) + (body + (form (@ (id "login-form") + (method "POST") + (action "")) + (input (@ (id "assertion-field") + (type "hidden") + (name "assertion") + (value "")))) + (p (a (@ (href "javascript:login()")) "Login")))))))) + (POST + (let* ((audience "http://localhost:8028") + (assertion (elnode-http-param httpcon "assertion")) + (result (scrumelo--verify-credentials audience assertion))) + (if (equal (cdr (assoc 'status result)) "okay") + (progn + (elnode-http-start httpcon 302 + '("Content-Type" . "text/html") + '("Location" . "/")) + (elnode-send-redirect httpcon "/")) + (elnode-send-status httpcon 403 "Not allowed")))))) + (defun scrumelo-handler (httpcon) "Send the right requests in HTTPCON to the right functions." (elnode-dispatcher @@ -198,6 +249,9 @@ saving the buffer." `(("^/$" . scrumelo-backlog-page) ("^/js/main.js" . ,(elnode-make-send-file (concat scrumelo--base-dir "js/main.js"))) + ("^/js/login.js" . ,(elnode-make-send-file + (concat scrumelo--base-dir "js/login.js"))) + ("^/login/$" . scrumelo-login-page) ("^/stories/$" . scrumelo-main-json) ("^/stories/new/$" . scrumelo-new-story) ("^/stories/state/$" . scrumelo-change-state) |