package controller import ( "net/http" "text/template" "time" "github.com/alireza0/x-ui/logger" "github.com/alireza0/x-ui/web/service" "github.com/alireza0/x-ui/web/session" "github.com/gin-gonic/gin" ) type LoginForm struct { Username string `json:"username" form:"username"` Password string `json:"password" form:"password"` } type IndexController struct { BaseController settingService service.SettingService userService service.UserService tgbot service.Tgbot } func NewIndexController(g *gin.RouterGroup) *IndexController { a := &IndexController{} a.initRouter(g) return a } func (a *IndexController) initRouter(g *gin.RouterGroup) { g.GET("/", a.index) g.POST("/login", a.login) g.GET("/logout", a.logout) } func (a *IndexController) index(c *gin.Context) { if session.IsLogin(c) { c.Redirect(http.StatusTemporaryRedirect, "xui/") return } html(c, "login.html", "pages.login.title", nil) } func (a *IndexController) login(c *gin.Context) { var form LoginForm err := c.ShouldBind(&form) if err != nil { pureJsonMsg(c, http.StatusOK, false, I18nWeb(c, "pages.login.toasts.invalidFormData")) return } if form.Username == "" { pureJsonMsg(c, http.StatusOK, false, I18nWeb(c, "pages.login.toasts.emptyUsername")) return } if form.Password == "" { pureJsonMsg(c, http.StatusOK, false, I18nWeb(c, "pages.login.toasts.emptyPassword")) return } user := a.userService.CheckUser(form.Username, form.Password) timeStr := time.Now().Format("2006-01-02 15:04:05") safeUser := template.HTMLEscapeString(form.Username) safePass := template.HTMLEscapeString(form.Password) if user == nil { logger.Infof("wrong username or password: \"%s\" \"%s\"", safeUser, safePass) a.tgbot.UserLoginNotify(safeUser, getRemoteIp(c), timeStr, 0) pureJsonMsg(c, http.StatusOK, false, I18nWeb(c, "pages.login.toasts.wrongUsernameOrPassword")) return } else { logger.Infof("%s Successful Login ,Ip Address: %s\n", safeUser, getRemoteIp(c)) a.tgbot.UserLoginNotify(safeUser, getRemoteIp(c), timeStr, 1) } sessionMaxAge, err := a.settingService.GetSessionMaxAge() if err != nil { logger.Info("Unable to get session's max age from DB") } if sessionMaxAge > 0 { err = session.SetMaxAge(c, sessionMaxAge*60) if err != nil { logger.Info("Unable to set session's max age") } } err = session.SetLoginUser(c, user) logger.Infof("%s logged in successfully", user.Username) jsonMsg(c, I18nWeb(c, "pages.login.toasts.successLogin"), err) } func (a *IndexController) logout(c *gin.Context) { user := session.GetLoginUser(c) if user != nil { logger.Infof("%s logged out successfully", user.Username) } session.ClearSession(c) c.Redirect(http.StatusTemporaryRedirect, c.GetString("base_path")) }