mirror of
https://github.com/philomena-dev/philomena.git
synced 2024-11-24 20:37:59 +01:00
39 lines
900 B
Elixir
39 lines
900 B
Elixir
defmodule PhilomenaWeb.TorPlug do
|
|
@moduledoc """
|
|
This plug ensures that a Tor user is authenticated.
|
|
|
|
## Example
|
|
|
|
plug PhilomenaWeb.TorPlug
|
|
"""
|
|
use PhilomenaWeb, :verified_routes
|
|
|
|
alias Phoenix.Controller
|
|
alias Plug.Conn
|
|
|
|
@doc false
|
|
@spec init(any()) :: any()
|
|
def init(opts), do: opts
|
|
|
|
@doc false
|
|
@spec call(Conn.t(), any()) :: Conn.t()
|
|
def call(conn, _opts) do
|
|
onion? = onion?(conn.host)
|
|
user = conn.assigns.current_user
|
|
|
|
maybe_redirect(conn, user, onion?)
|
|
end
|
|
|
|
def maybe_redirect(conn, nil, true) do
|
|
conn
|
|
|> Controller.redirect(to: ~p"/sessions/new")
|
|
|> Conn.halt()
|
|
end
|
|
|
|
def maybe_redirect(conn, _user, _onion?), do: conn
|
|
|
|
# This is allowed, because nginx won't forward the request
|
|
# to the appserver if the hostname isn't in a specific list
|
|
# of allowed hostnames.
|
|
def onion?(host), do: String.ends_with?(host, ".onion")
|
|
end
|