Implement basic login function; add basic styling

src/Auth/AuthMiddleware.php

@@ -0,0 +1,35 @@
+<?php
+declare(strict_types=1);
+
+namespace MailAccountAdmin\Auth;
+
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use Psr\Http\Server\MiddlewareInterface;
+use Psr\Http\Server\RequestHandlerInterface;
+use Slim\Psr7\Response;
+
+class AuthMiddleware implements MiddlewareInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
+    {
+        $uri = $request->getUri();
+
+        // TODO: Lots of stuff. Session middleware, auth handler class, etc...
+        if ($uri->getPath() !== '/login') {
+            // Check authorization via session
+            if (empty($_SESSION['username'])) {
+                // Not logged in -> Redirect to /login
+                $response = new Response();
+                return $response
+                    ->withHeader('Location', '/login')
+                    ->withStatus(303);
+            }
+        }
+
+        return $handler->handle($request);
+    }
+}

src/Dependencies.php

@@ -4,7 +4,8 @@ declare(strict_types=1);
 namespace MailAccountAdmin;
 
 use DI\Container;
-use MailAccountAdmin\Login\LoginController;
+use MailAccountAdmin\Frontend\Login\LoginController;
+use MailAccountAdmin\Frontend\Dashboard\DashboardController;
 use PDO;
 use Psr\Container\ContainerInterface;
 use Slim\Views\Twig;
@@ -47,13 +48,20 @@ class Dependencies
             );
         });
 
-        // Login, registration, authentication
+        // Login page
         $container->set(LoginController::class, function (ContainerInterface $c) {
             return new LoginController(
                 $c->get(self::TWIG)
             );
         });
 
+        // Dashboard
+        $container->set(DashboardController::class, function (ContainerInterface $c) {
+            return new DashboardController(
+                $c->get(self::TWIG)
+            );
+        });
+
         return $container;
     }
 }

src/Frontend/Dashboard/DashboardController.php

@@ -1,13 +1,13 @@
 <?php
 declare(strict_types=1);
 
-namespace MailAccountAdmin\Login;
+namespace MailAccountAdmin\Frontend\Dashboard;
 
 use Psr\Http\Message\ResponseInterface as Response;
 use Psr\Http\Message\ServerRequestInterface as Request;
 use Slim\Views\Twig;
 
-class LoginController
+class DashboardController
 {
     /** @var Twig */
     private $view;
@@ -17,11 +17,12 @@ class LoginController
         $this->view = $view;
     }
 
-    public function showLoginPage(Request $request, Response $response): Response
+    public function showDashboard(Request $request, Response $response): Response
     {
         $renderData = [
+            'username' => $_SESSION['username'],
         ];
 
-        return $this->view->render($response, 'login.html', $renderData);
+        return $this->view->render($response, 'dashboard.html.twig', $renderData);
     }
 }

src/Frontend/Login/LoginController.php

@@ -0,0 +1,63 @@
+<?php
+declare(strict_types=1);
+
+namespace MailAccountAdmin\Frontend\Login;
+
+use Psr\Http\Message\ResponseInterface as Response;
+use Psr\Http\Message\ServerRequestInterface as Request;
+use Slim\Exception\HttpBadRequestException;
+use Slim\Views\Twig;
+
+class LoginController
+{
+    /** @var Twig */
+    private $view;
+
+    public function __construct(Twig $view)
+    {
+        $this->view = $view;
+    }
+
+    public function showLoginPage(Request $request, Response $response): Response
+    {
+        if (!empty($_SESSION['username'])) {
+            // Already logged in, redirect to dashboard
+            return $response
+                ->withHeader('Location', '/')
+                ->withStatus(303);
+        }
+
+        $renderData = [
+        ];
+
+        return $this->view->render($response, 'login.html.twig', $renderData);
+    }
+
+    public function authenticateUser(Request $request, Response $response): Response
+    {
+        $params = (array)$request->getParsedBody();
+
+        if (empty($params['username']) || empty($params['password'])) {
+            throw new HttpBadRequestException($request, 'Missing parameters');
+        }
+
+        // TODO: only for testing, obviously
+        if ($params['username'] === 'lexi' && $params['password'] === 'testpw') {
+            $_SESSION['username'] = $params['username'];
+            return $response
+                ->withHeader('Location', '/')
+                ->withStatus(303);
+        } else {
+            return $this->view->render($response, 'login.html.twig', ['error' => 'Wrong username or password!']);
+        }
+    }
+
+    public function logoutUser(Request $request, Response $response): Response
+    {
+        session_destroy();
+
+        return $response
+            ->withHeader('Location', '/login')
+            ->withStatus(303);
+    }
+}

src/Middlewares.php

@@ -3,6 +3,7 @@ declare(strict_types=1);
 
 namespace MailAccountAdmin;
 
+use MailAccountAdmin\Auth\AuthMiddleware;
 use Slim\App;
 use Slim\Views\TwigMiddleware;
 
@@ -13,6 +14,7 @@ class Middlewares
         $displayErrorDetails = $settings->isDebugMode();
 
         $app->addErrorMiddleware($displayErrorDetails, true, true);
+        $app->add(new AuthMiddleware());
         $app->add(TwigMiddleware::createFromContainer($app));
     }
 }

src/Routes.php

@@ -3,13 +3,20 @@ declare(strict_types=1);
 
 namespace MailAccountAdmin;
 
-use MailAccountAdmin\Login\LoginController;
+use MailAccountAdmin\Frontend\Dashboard\DashboardController;
+use MailAccountAdmin\Frontend\Login\LoginController;
 use Slim\App;
 
 class Routes
 {
     public static function setRoutes(App $app): void
     {
-        $app->get('/', LoginController::class . ':showLoginPage');
+        // Login
+        $app->get('/login', LoginController::class . ':showLoginPage');
+        $app->post('/login', LoginController::class . ':authenticateUser');
+        $app->get('/logout', LoginController::class . ':logoutUser');
+
+        // Dashboard
+        $app->get('/', DashboardController::class . ':showDashboard');
     }
 }