Add QR codes, link expiry, password protection, previews, audit trail and bulk operations

src/web/password_gate.rs

@@ -0,0 +1,75 @@
+use axum::{
+    extract::{Path, State},
+    response::{IntoResponse, Redirect, Response},
+    Form,
+};
+use axum_extra::extract::{cookie::Cookie, CookieJar};
+use serde::Deserialize;
+
+use crate::auth::password::verify_password;
+use crate::services::shortener::get_url_by_code;
+use crate::state::AppState;
+use crate::templates::GateTemplate;
+
+#[derive(Deserialize)]
+pub struct PasswordGateForm {
+    pub password: String,
+}
+
+// GET /gate/:code
+pub async fn gate_get(Path(code): Path<String>) -> impl IntoResponse {
+    GateTemplate { code, error: None }
+}
+
+// POST /gate/:code
+pub async fn gate_post(
+    State(state): State<AppState>,
+    Path(code): Path<String>,
+    jar: CookieJar,
+    Form(form): Form<PasswordGateForm>,
+) -> Response {
+    let url_opt = match get_url_by_code(&state.db, &code) {
+        Ok(url) => url,
+        Err(_) => {
+            return (
+                axum::http::StatusCode::INTERNAL_SERVER_ERROR,
+                "Database error",
+            )
+                .into_response()
+        }
+    };
+
+    let url = match url_opt {
+        Some(u) => u,
+        None => return (axum::http::StatusCode::NOT_FOUND, "Url not found").into_response(),
+    };
+
+    let password_hash = match url.password_hash {
+        Some(ref h) => h,
+        None => {
+            // Not password protected, redirect to resolution
+            return Redirect::temporary(&format!("/{}", code)).into_response();
+        }
+    };
+
+    if verify_password(&form.password, password_hash) {
+        // Correct password - set 15 min temporary cookie
+        let cookie_name = format!("bzod_gate_{}", code);
+        let cookie = Cookie::build((cookie_name, "authorized"))
+            .secure(state.config.cookie_secure)
+            .same_site(axum_extra::extract::cookie::SameSite::Strict)
+            .http_only(true)
+            .path("/")
+            .max_age(time::Duration::minutes(15));
+
+        let updated_jar = jar.add(cookie);
+        (updated_jar, Redirect::temporary(&format!("/{}", code))).into_response()
+    } else {
+        // Invalid password
+        GateTemplate {
+            code,
+            error: Some("Invalid password".to_string()),
+        }
+        .into_response()
+    }
+}