auth: Improve login parts

internal/dis/component/auth/auth.go

@@ -1,12 +1,15 @@
 package auth
 
 import (
+	"context"
 	"net/http"
 
 	"github.com/FAU-CDI/wisski-distillery/internal/dis/component"
 	"github.com/FAU-CDI/wisski-distillery/internal/dis/component/sql"
 	"github.com/FAU-CDI/wisski-distillery/pkg/lazy"
+	"github.com/gorilla/csrf"
 	"github.com/gorilla/sessions"
+	"github.com/julienschmidt/httprouter"
 )
 
 type Auth struct {
@@ -22,3 +25,30 @@ type Auth struct {
 var (
 	_ component.Routeable = (*Auth)(nil)
 )
+
+func (auth *Auth) Routes() []string { return []string{"/auth/"} }
+
+func (auth *Auth) HandleRoute(ctx context.Context, route string) (http.Handler, error) {
+	router := httprouter.New()
+
+	// setup the csrf handler (if needed)
+	auth.csrf.Get(func() func(http.Handler) http.Handler {
+		var opts []csrf.Option
+		if !auth.Config.HTTPSEnabled() {
+			opts = append(opts, csrf.Secure(false))
+		}
+		opts = append(opts, csrf.Path(route))
+		return csrf.Protect(auth.Config.CSRFSecret(), opts...)
+	})
+
+	router.Handler(http.MethodGet, route, auth.authHome(ctx))
+
+	login := auth.loginForm()
+
+	router.Handler(http.MethodGet, route+"login", login)
+	router.Handler(http.MethodPost, route+"login", login)
+
+	router.HandlerFunc(http.MethodGet, route+"logout", auth.logoutRoute)
+
+	return router, nil
+}