Add http.readOnly config.

mtricht · Apr 20, 2019 · 017b2f9 · 017b2f9
1 parent 0d49d5d
commit 017b2f9
Show file tree

Hide file tree

Showing 7 changed files with 36 additions and 15 deletions.
diff --git a/assets/index.gohtml b/assets/index.gohtml
@@ -1,6 +1,8 @@
 {{ define "index" }}
   {{ template "header" }}
-  <p><a href="{{ .BaseURL }}add"><i class="fa fa-plus"></i> Add trello board</a></p>
+  {{ if not .ReadOnly }}
+    <p><a href="{{ .BaseURL }}add"><i class="fa fa-plus"></i> Add trello board</a></p>
+  {{ end }}
   <table class="table table-bordered table-striped">
     <tr>
       <th></th>
@@ -21,7 +23,9 @@
         <td>{{ .PointsCompleted }} / {{ .Points }}</td>
         <td>
           <a href="{{ $.BaseURL }}refresh/{{ .ID }}"><i class="fa fa-refresh" aria-hidden="true"></i></a>
-          <a href="{{ $.BaseURL }}delete/{{ .ID }}"><i class="fa fa-trash" aria-hidden="true"></i></a>
+          {{ if not $.ReadOnly }}
+            <a href="{{ $.BaseURL }}delete/{{ .ID }}"><i class="fa fa-trash" aria-hidden="true"></i></a>
+          {{ end }}
         </td>
       </tr>  
     {{ end }}

diff --git a/assets/views.go b/assets/views.go
diff --git a/cmd/main.go b/cmd/main.go
@@ -8,9 +8,9 @@ import (
 
 	_ "github.com/jinzhu/gorm/dialects/postgres"
 	_ "github.com/jinzhu/gorm/dialects/sqlite"
-	"github.com/spf13/viper"
 	"github.com/mtricht/trello-burndown/pkg/server"
 	"github.com/mtricht/trello-burndown/pkg/trello"
+	"github.com/spf13/viper"
 )
 
 func init() {
@@ -27,6 +27,8 @@ func init() {
 	}
 	viper.AutomaticEnv()
 	viper.SetEnvKeyReplacer(strings.NewReplacer(".", "_"))
+	viper.WatchConfig()
+	viper.SetDefault("http.readOnly", false)
 	log.SetFlags(log.LstdFlags | log.Lshortfile)
 }
 

diff --git a/config.yaml.default b/config.yaml.default
@@ -7,4 +7,5 @@ database:
     url: ./trello.db # Example for remote connection: postgresql://user:pass@host:5432/trello?connect_timeout=5
 http:
     port: 8080
-    baseURL: http://localhost:8080/ # With trailing slash
+    baseURL: http://localhost:8080/ # With trailing slash
+    readOnly: false # Disallow any creation or deletion of boards
diff --git a/pkg/server/add.go b/pkg/server/add.go
@@ -4,15 +4,19 @@ import (
 	"net/http"
 	"time"
 
-	"github.com/spf13/viper"
 	"github.com/mtricht/trello-burndown/pkg/trello"
+	"github.com/spf13/viper"
 )
 
 type addPage struct {
 	BaseURL string
 }
 
 func addGet(w http.ResponseWriter, r *http.Request) {
+	if viper.GetBool("http.readOnly") {
+		w.WriteHeader(http.StatusUnauthorized)
+		return
+	}
 	err := templates.ExecuteTemplate(w, "add", addPage{
 		BaseURL: viper.GetString("http.baseURL"),
 	})
@@ -22,6 +26,10 @@ func addGet(w http.ResponseWriter, r *http.Request) {
 }
 
 func addPost(w http.ResponseWriter, r *http.Request) {
+	if viper.GetBool("http.readOnly") {
+		w.WriteHeader(http.StatusUnauthorized)
+		return
+	}
 	r.ParseForm()
 	db := trello.GetDatabase()
 	defer db.Close()

diff --git a/pkg/server/delete.go b/pkg/server/delete.go
@@ -4,11 +4,15 @@ import (
 	"net/http"
 
 	"github.com/gorilla/mux"
-	"github.com/spf13/viper"
 	"github.com/mtricht/trello-burndown/pkg/trello"
+	"github.com/spf13/viper"
 )
 
 func delete(w http.ResponseWriter, r *http.Request) {
+	if viper.GetBool("http.readOnly") {
+		w.WriteHeader(http.StatusUnauthorized)
+		return
+	}
 	vars := mux.Vars(r)
 	db := trello.GetDatabase()
 	defer db.Close()

diff --git a/pkg/server/index.go b/pkg/server/index.go
@@ -3,13 +3,14 @@ package server
 import (
 	"net/http"
 
-	"github.com/spf13/viper"
 	"github.com/mtricht/trello-burndown/pkg/trello"
+	"github.com/spf13/viper"
 )
 
 type indexPage struct {
-	Boards  []trello.Board
-	BaseURL string
+	Boards   []trello.Board
+	BaseURL  string
+	ReadOnly bool
 }
 
 func index(w http.ResponseWriter, r *http.Request) {
@@ -18,8 +19,9 @@ func index(w http.ResponseWriter, r *http.Request) {
 	boards := []trello.Board{}
 	db.Order("date_start desc").Find(&boards)
 	indexPage := indexPage{
-		Boards:  boards,
-		BaseURL: viper.GetString("http.baseURL"),
+		Boards:   boards,
+		BaseURL:  viper.GetString("http.baseURL"),
+		ReadOnly: viper.GetBool("http.readOnly"),
 	}
 	err := templates.ExecuteTemplate(w, "index", indexPage)
 	if err != nil {