Goit

// Copyright (C) 2023, Jakob Wakeling
// All rights reserved.

package user

import (
	"fmt"
	"log"
	"net/http"
	"strconv"
	"time"

	"github.com/Jamozed/Goit/src/goit"
	"github.com/Jamozed/Goit/src/util"
)

func HandleSessions(w http.ResponseWriter, r *http.Request) {
	auth, user, err := goit.Auth(w, r, true)
	if err != nil {
		log.Println("[admin]", err.Error())
		goit.HttpError(w, http.StatusInternalServerError)
	}

	if !auth {
		goit.HttpError(w, http.StatusUnauthorized)
		return
	}

	_, ss := goit.GetSessionCookie(r)

	revoke, err := strconv.ParseInt(r.FormValue("revoke"), 10, 64)
	if err != nil {
		revoke = -1
	}

	type row struct{ Index, Ip, Seen, Expiry, Current string }
	var data = struct {
		Title    string
		Sessions []row
	}{Title: "User - Sessions"}

	goit.SessionsMutex.RLock()
	util.Debugln("[goit.HandleSessions] SessionsMutex rlock")

	if revoke >= 0 && revoke < int64(len(goit.Sessions[user.Id])) {
		var token = goit.Sessions[user.Id][revoke].Token
		var current = token == ss.Token

		goit.SessionsMutex.RUnlock()
		util.Debugln("[goit.HandleSessions] SessionsMutex runlock")

		goit.EndSession(user.Id, token)

		if current {
			goit.EndSessionCookie(w)
			http.Redirect(w, r, "/", http.StatusFound)
			return
		}

		http.Redirect(w, r, "/user/sessions", http.StatusFound)
		return
	}

	for i, v := range goit.Sessions[user.Id] {
		data.Sessions = append(data.Sessions, row{
			Index: fmt.Sprint(i), Ip: v.Ip, Seen: v.Seen.Format(time.DateTime), Expiry: v.Expiry.Format(time.DateTime),
			Current: util.If(v.Token == ss.Token, "(current)", ""),
		})
	}

	goit.SessionsMutex.RUnlock()
	util.Debugln("[goit.HandleSessions] SessionsMutex runlock")

	if err := goit.Tmpl.ExecuteTemplate(w, "user/sessions", data); err != nil {
		log.Println("[/user/login]", err.Error())
	}
}