suzanne.soy/racket-pkg-website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switch to POST-based /api/authenticate

Browse Source
This commit is contained in:
Tony Garnock-Jones 2015-09-26 21:30:41 -05:00
parent 357bf31220
commit 3bebf69540
2 changed files with 31 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/jsonp-client.rkt
View File

@ -1,7 +1,8 @@
#lang racket/base
(provide jsonp-baseurl
jsonp-rpc!)
jsonp-rpc!
simple-json-rpc!)
(require racket/match)
(require racket/format)
@ -57,3 +58,26 @@
(define reply (string->jsexpr json))
(unless sensitive? (log-info "jsonp-rpc: reply ~a" reply))
reply))
(define (simple-json-rpc! #:sensitive? [sensitive? #f]
#:include-credentials? [include-credentials? #t]
site-relative-url
jsexpr-to-send)
(define s (current-session))
(if sensitive?
(log-info "simple-json-rpc: sensitive request ~a" site-relative-url)
(log-info "simple-json-rpc: request ~a params ~a~a"
site-relative-url
jsexpr-to-send
(if include-credentials?
(if s
" +creds"
" +creds(missing)")
"")))
(define baseurl (or (jsonp-baseurl) (error 'simple-json-rpc! "jsonp-baseurl is not set")))
(define request-url (string->url (format "~a~a" baseurl site-relative-url)))
(define post-data (string->bytes/utf-8 (jsexpr->string jsexpr-to-send)))
(define raw-response (port->string (post-pure-port request-url post-data)))
(define reply (string->jsexpr raw-response))
(unless sensitive? (log-info "simple-json-rpc: reply ~a" reply))
reply)

12
src/site.rkt
View File

@ -306,12 +306,12 @@
,(form-group 4 5 (primary-button "Log in"))))))))
(define (authenticate-with-server! email password code)
(jsonp-rpc! #:sensitive? #t
#:include-credentials? #f
"/jsonp/authenticate"
(list (cons 'email email)
(cons 'passwd password)
(cons 'code code))))
(simple-json-rpc! #:sensitive? #t
#:include-credentials? #f
"/api/authenticate"
(hash 'email email
'passwd password
'code code)))
(define (process-login-credentials request)
(define-form-bindings request (email password))