module main import os { join_path } fn (mut c Create) set_web_project_files() { c.files << ProjectFiles{ path: join_path(c.name, 'src', 'databases', 'config_databases_sqlite.v') content: "module databases import db.sqlite // can change to 'db.mysql', 'db.pg' pub fn create_db_connection() !sqlite.DB { mut db := sqlite.connect('app.db')! return db } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'templates', 'header_component.html') content: " " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'templates', 'products.css') content: 'h1.title { font-family: Arial, Helvetica, sans-serif; color: #3b7bbf; } div.products-table { border: 1px solid; max-width: 720px; padding: 10px; margin: 10px; }' } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'templates', 'products.html') content: " Login @css 'src/templates/products.css'
@include 'header_component.html'

Hi, \${user.username}! you are online

@for product in user.products @end
ID Name Created date
\${product.id} \${product.name} \${product.created_at}
" } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'auth_controllers.v') content: "module main import vweb @['/controller/auth'; post] pub fn (mut app App) controller_auth(username string, password string) vweb.Result { response := app.service_auth(username, password) or { app.set_status(400, '') return app.text('error: \${err}') } return app.json(response) } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'auth_dto.v') content: 'module main struct AuthRequestDto { username string @[nonull] password string @[nonull] } ' } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'auth_services.v') content: "module main import crypto.hmac import crypto.sha256 import crypto.bcrypt import encoding.base64 import json import databases import time struct JwtHeader { alg string typ string } struct JwtPayload { sub string // (subject) = Entity to whom the token belongs, usually the user ID; iss string // (issuer) = Token issuer; exp string // (expiration) = Timestamp of when the token will expire; iat time.Time // (issued at) = Timestamp of when the token was created; aud string // (audience) = Token recipient, represents the application that will use it. name string roles string permissions string } fn (mut app App) service_auth(username string, password string) !string { mut db := databases.create_db_connection() or { eprintln(err) panic(err) } defer { db.close() or { panic(err) } } users := sql db { select from User where username == username }! if users.len == 0 { return error('user not found') } user := users.first() if !user.active { return error('user is not active') } bcrypt.compare_hash_and_password(password.bytes(), user.password.bytes()) or { return error('Failed to auth user, \${err}') } token := make_token(user) return token } fn make_token(user User) string { secret := 'SECRET_KEY' // os.getenv('SECRET_KEY') jwt_header := JwtHeader{'HS256', 'JWT'} jwt_payload := JwtPayload{ sub: '\${user.id}' name: '\${user.username}' iat: time.now() } header := base64.url_encode(json.encode(jwt_header).bytes()) payload := base64.url_encode(json.encode(jwt_payload).bytes()) signature := base64.url_encode(hmac.new(secret.bytes(), '\${header}.\${payload}'.bytes(), sha256.sum, sha256.block_size).bytestr().bytes()) jwt := '\${header}.\${payload}.\${signature}' return jwt } fn auth_verify(token string) bool { if token == '' { return false } secret := 'SECRET_KEY' // os.getenv('SECRET_KEY') token_split := token.split('.') signature_mirror := hmac.new(secret.bytes(), '\${token_split[0]}.\${token_split[1]}'.bytes(), sha256.sum, sha256.block_size).bytestr().bytes() signature_from_token := base64.url_decode(token_split[2]) return hmac.equal(signature_from_token, signature_mirror) // return true } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'index.html') content: " \${title}
@include 'templates/header_component.html'
" } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'main.v') content: "module main import vweb import databases import os const ( port = 8082 ) struct App { vweb.Context } pub fn (app App) before_request() { println('[web] before_request: \${app.req.method} \${app.req.url}') } fn main() { mut db := databases.create_db_connection() or { panic(err) } sql db { create table User create table Product } or { panic('error on create table: \${err}') } db.close() or { panic(err) } mut app := &App{} app.serve_static('/favicon.ico', 'src/assets/favicon.ico') // makes all static files available. app.mount_static_folder_at(os.resource_abs_path('.'), '/') vweb.run(app, port) } pub fn (mut app App) index() vweb.Result { title := 'vweb app' return \$vweb.html() } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'product_controller.v') content: "module main import vweb import encoding.base64 import json @['/controller/products'; get] pub fn (mut app App) controller_get_all_products() vweb.Result { token := app.req.header.get_custom('token') or { '' } if !auth_verify(token) { app.set_status(401, '') return app.text('Not valid token') } jwt_payload_stringify := base64.url_decode_str(token.split('.')[1]) jwt_payload := json.decode(JwtPayload, jwt_payload_stringify) or { app.set_status(501, '') return app.text('jwt decode error') } user_id := jwt_payload.sub response := app.service_get_all_products_from(user_id.int()) or { app.set_status(400, '') return app.text('\${err}') } return app.json(response) // return app.text('response') } @['/controller/product/create'; post] pub fn (mut app App) controller_create_product(product_name string) vweb.Result { if product_name == '' { app.set_status(400, '') return app.text('product name cannot be empty') } token := app.req.header.get_custom('token') or { '' } if !auth_verify(token) { app.set_status(401, '') return app.text('Not valid token') } jwt_payload_stringify := base64.url_decode_str(token.split('.')[1]) jwt_payload := json.decode(JwtPayload, jwt_payload_stringify) or { app.set_status(501, '') return app.text('jwt decode error') } user_id := jwt_payload.sub app.service_add_product(product_name, user_id.int()) or { app.set_status(400, '') return app.text('error: \${err}') } app.set_status(201, '') return app.text('product created successfully') } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'product_entities.v') content: "module main @[table: 'products'] struct Product { id int @[primary; sql: serial] user_id int name string @[nonull; sql_type: 'TEXT'] created_at string @[default: 'CURRENT_TIMESTAMP'] } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'product_service.v') content: "module main import databases fn (mut app App) service_add_product(product_name string, user_id int) ! { mut db := databases.create_db_connection()! defer { db.close() or { panic(err) } } product_model := Product{ name: product_name user_id: user_id } mut insert_error := '' sql db { insert product_model into Product } or { insert_error = err.msg() } if insert_error != '' { return error(insert_error) } } fn (mut app App) service_get_all_products_from(user_id int) ![]Product { mut db := databases.create_db_connection() or { println(err) return err } defer { db.close() or { panic(err) } } results := sql db { select from Product where user_id == user_id }! return results } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'product_view_api.v') content: "module main import json import net.http pub fn get_products(token string) ![]Product { mut header := http.new_header() header.add_custom('token', token)! url := 'http://localhost:8082/controller/products' mut config := http.FetchConfig{ header: header } resp := http.fetch(http.FetchConfig{ ...config, url: url })! products := json.decode([]Product, resp.body)! return products } pub fn get_product(token string) ![]User { mut header := http.new_header() header.add_custom('token', token)! url := 'http://localhost:8082/controller/product' mut config := http.FetchConfig{ header: header } resp := http.fetch(http.FetchConfig{ ...config, url: url })! products := json.decode([]User, resp.body)! return products } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'product_view.v') content: "module main import vweb @['/products'; get] pub fn (mut app App) products() !vweb.Result { token := app.get_cookie('token') or { app.set_status(400, '') return app.text('\${err}') } user := get_user(token) or { app.set_status(400, '') return app.text('Failed to fetch data from the server. Error: \${err}') } return \$vweb.html() } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'user_controllers.v') content: "module main import vweb import encoding.base64 import json @['/controller/users'; get] pub fn (mut app App) controller_get_all_user() vweb.Result { // token := app.get_cookie('token') or { '' } token := app.req.header.get_custom('token') or { '' } if !auth_verify(token) { app.set_status(401, '') return app.text('Not valid token') } response := app.service_get_all_user() or { app.set_status(400, '') return app.text('\${err}') } return app.json(response) } @['/controller/user'; get] pub fn (mut app App) controller_get_user() vweb.Result { // token := app.get_cookie('token') or { '' } token := app.req.header.get_custom('token') or { '' } if !auth_verify(token) { app.set_status(401, '') return app.text('Not valid token') } jwt_payload_stringify := base64.url_decode_str(token.split('.')[1]) jwt_payload := json.decode(JwtPayload, jwt_payload_stringify) or { app.set_status(501, '') return app.text('jwt decode error') } user_id := jwt_payload.sub response := app.service_get_user(user_id.int()) or { app.set_status(400, '') return app.text('\${err}') } return app.json(response) } @['/controller/user/create'; post] pub fn (mut app App) controller_create_user(username string, password string) vweb.Result { if username == '' { app.set_status(400, '') return app.text('username cannot be empty') } if password == '' { app.set_status(400, '') return app.text('password cannot be empty') } app.service_add_user(username, password) or { app.set_status(400, '') return app.text('error: \${err}') } app.set_status(201, '') return app.text('User created successfully') } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'user_entities.v') content: "module main @[table: 'users'] pub struct User { mut: id int @[primary; sql: serial] username string @[nonull; sql_type: 'TEXT'; unique] password string @[nonull; sql_type: 'TEXT'] active bool products []Product @[fkey: 'user_id'] } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'user_services.v') content: "module main import crypto.bcrypt import databases fn (mut app App) service_add_user(username string, password string) ! { mut db := databases.create_db_connection()! defer { db.close() or { panic(err) } } hashed_password := bcrypt.generate_from_password(password.bytes(), bcrypt.min_cost) or { eprintln(err) return err } user_model := User{ username: username password: hashed_password active: true } mut insert_error := '' sql db { insert user_model into User } or { insert_error = err.msg() } if insert_error != '' { return error(insert_error) } } fn (mut app App) service_get_all_user() ![]User { mut db := databases.create_db_connection() or { println(err) return err } defer { db.close() or { panic(err) } } results := sql db { select from User }! return results } fn (mut app App) service_get_user(id int) !User { mut db := databases.create_db_connection() or { println(err) return err } defer { db.close() or { panic(err) } } results := sql db { select from User where id == id }! if results.len == 0 { return error('no results') } return results[0] } " } c.files << ProjectFiles{ path: join_path(c.name, 'src', 'user_view_api.v') content: "module main import json import net.http pub fn get_users(token string) ![]User { mut header := http.new_header() header.add_custom('token', token)! url := 'http://localhost:8082/controller/users' mut config := http.FetchConfig{ header: header } resp := http.fetch(http.FetchConfig{ ...config, url: url })! users := json.decode([]User, resp.body)! return users } pub fn get_user(token string) !User { mut header := http.new_header() header.add_custom('token', token)! url := 'http://localhost:8082/controller/user' mut config := http.FetchConfig{ header: header } resp := http.fetch(http.FetchConfig{ ...config, url: url })! users := json.decode(User, resp.body)! return users } " } }