diff options
Diffstat (limited to 'cmd/dashboard/main.go')
| -rw-r--r-- | cmd/dashboard/main.go | 29 |
1 files changed, 28 insertions, 1 deletions
diff --git a/cmd/dashboard/main.go b/cmd/dashboard/main.go index db1f66d..0553041 100644 --- a/cmd/dashboard/main.go +++ b/cmd/dashboard/main.go @@ -23,6 +23,8 @@ import ( "task-dashboard/internal/handlers" appmiddleware "task-dashboard/internal/middleware" "task-dashboard/internal/store" + + "github.com/go-webauthn/webauthn/webauthn" ) func main() { @@ -78,8 +80,23 @@ func main() { log.Printf("Warning: failed to parse auth templates: %v", err) } + // Initialize WebAuthn (optional - only if configured) + var wa *webauthn.WebAuthn + if cfg.WebAuthnRPID != "" && cfg.WebAuthnOrigin != "" { + var err error + wa, err = webauthn.New(&webauthn.Config{ + RPDisplayName: "Task Dashboard", + RPID: cfg.WebAuthnRPID, + RPOrigins: []string{cfg.WebAuthnOrigin}, + }) + if err != nil { + log.Fatalf("Failed to initialize WebAuthn: %v", err) + } + log.Printf("WebAuthn initialized (RP ID: %s, Origin: %s)", cfg.WebAuthnRPID, cfg.WebAuthnOrigin) + } + // Initialize auth handlers - authHandlers := auth.NewHandlers(authService, sessionManager, authTemplates) + authHandlers := auth.NewHandlers(authService, sessionManager, authTemplates, wa) // Initialize API clients todoistClient := api.NewTodoistClient(cfg.TodoistAPIKey) @@ -146,6 +163,10 @@ func main() { r.With(authRateLimiter.Limit).Post("/login", authHandlers.HandleLogin) r.Post("/logout", authHandlers.HandleLogout) + // WebAuthn public routes (rate-limited) + r.With(authRateLimiter.Limit).Post("/passkeys/login/begin", authHandlers.HandlePasskeyLoginBegin) + r.With(authRateLimiter.Limit).Post("/passkeys/login/finish", authHandlers.HandlePasskeyLoginFinish) + // Serve static files (public) fileServer := http.FileServer(http.Dir(cfg.StaticDir)) r.Handle("/static/*", http.StripPrefix("/static/", fileServer)) @@ -235,6 +256,12 @@ func main() { r.Post("/shopping/mode/{store}/toggle", h.HandleShoppingModeToggle) r.Post("/shopping/mode/{store}/complete", h.HandleShoppingModeComplete) + // Passkey management (WebAuthn) + r.Get("/settings/passkeys", authHandlers.HandleListPasskeys) + r.Post("/passkeys/register/begin", authHandlers.HandlePasskeyRegisterBegin) + r.Post("/passkeys/register/finish", authHandlers.HandlePasskeyRegisterFinish) + r.Delete("/passkeys/{id}", authHandlers.HandleDeletePasskey) + // Settings r.Get("/settings", h.HandleSettingsPage) r.Post("/settings/sync", h.HandleSyncSources) |