update UI, add /api/v1/auth/session #16

api/openapi.yaml

@@ -94,6 +94,34 @@ paths:
         '500':
           description: Internal Server Error
       parameters: []
+  /api/v1/auth/session:
+    get:
+      summary: Validate current session and return user role
+      description: Check if the current session is valid and return the user's role.
+      operationId: validateSession
+      tags:
+        - Sessions
+      responses:
+        '200':
+          description: Session validation result
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  valid:
+                    type: boolean
+                    description: Indicates if the current session is valid
+                  role:
+                    type: string
+                    example: "admin"
+                    description: The role of the current user
+                    nullable: true
+                  name:
+                    type: string
+                    example: "r00t"
+                    description: The name of the current user
+                    nullable: true
   /api/v1/users:
     get:
       tags:

html/assets/js/api.js

@@ -33,10 +33,11 @@ window.ctf01d_tp_api.auth_signin = function(auth_data) {
       });
 }
 
-window.ctf01d_tp_api.auth_session = function() {
+window.ctf01d_tp_api.auth_session = function (auth_data) {
     return $.ajax({
         url: '/api/v1/auth/session',
         method: 'GET',
         contentType: 'application/json',
+        data: JSON.stringify(auth_data),
       });
 }

html/assets/js/index.js

@@ -228,6 +228,6 @@ $(document).ready(function () {
         $('#btn_signin').css({"display": "none"});
         $('#btn_signout').css({"display": "inline-block"});
         $('#btn_profile').css({"display": "inline-block"});
-        $('#btn_profile').html(res.username + "(" + res.userrole + ")");
+        $('#btn_profile').html(res.name + " (" + res.role + ")");
     })
-})
+})

internal/app/handlers/interface.go

@@ -42,6 +42,10 @@ func (siw *ServerInterfaceWrapper) PostApiV1AuthSignout(w http.ResponseWriter, r
 	siw.handlers.PostApiV1AuthSignout(w, r)
 }
 
+func (siw *ServerInterfaceWrapper) ValidateSession(w http.ResponseWriter, r *http.Request) {
+	siw.handlers.ValidateSession(w, r)
+}
+
 func (siw *ServerInterfaceWrapper) ListResults(w http.ResponseWriter, r *http.Request) {
 	siw.handlers.ListResults(w, r)
 }

internal/app/handlers/sessions.go

@@ -66,3 +66,8 @@ func (h *Handlers) PostApiV1AuthSignout(w http.ResponseWriter, r *http.Request)
 	})
 	api_helpers.RespondWithJSON(w, http.StatusOK, map[string]string{"data": "User logout successful"})
 }
+
+func (h *Handlers) ValidateSession(w http.ResponseWriter, r *http.Request) {
+	// implement me
+	api_helpers.RespondWithJSON(w, http.StatusOK, map[string]string{"role": "Admin", "name": "R00t"})
+}