Implement saved sessions

middlewares/saved_session.go

@@ -0,0 +1,55 @@
+package middlewares
+
+import (
+	"errors"
+	"time"
+
+	"git.readonly.ch/bouzoure/pop-camarades/helpers"
+	"git.readonly.ch/bouzoure/pop-camarades/models"
+	"github.com/gofiber/fiber/v2"
+	"gorm.io/gorm"
+)
+
+func SavedSessionMiddleware(c *fiber.Ctx) error {
+	sessionUUID := c.Cookies("saved-session-uuid")
+	sessionSecret := c.Cookies("saved-session-secret")
+
+	if len(sessionUUID) > 0 && len(sessionSecret) > 0 {
+		db, err := helpers.GetDatabase()
+		if err != nil {
+			return err
+		}
+
+		var savedSession models.UserSavedSession
+		result := db.Find(
+			&savedSession,
+			"uuid = ? AND expiration >= ?",
+			sessionUUID,
+			time.Now(),
+		)
+
+		if errors.Is(result.Error, gorm.ErrRecordNotFound) {
+			c.ClearCookie("saved-session-uuid")
+			c.ClearCookie("saved-session-secret")
+
+			return c.Next()
+		}
+
+		if result.Error != nil {
+			return result.Error
+		}
+
+		if helpers.CheckPasswordHash(sessionSecret, savedSession.Secret) {
+			sess, err := helpers.GetSessionStore(c)
+			if err != nil {
+				return err
+			}
+
+			sess.Set("userid", savedSession.UserID)
+			sess.Set("totp-verified", "yes")
+			sess.Save()
+		}
+	}
+
+	return c.Next()
+}