Display calendar page with name of login, also add in README.md

.gitignore

@@ -1,2 +1,3 @@
 config.json
 .DS_Store
+token.json

README.md

@@ -1,3 +1,8 @@
 A calandar viewer for stalwart calandars
 
 **NOTE** while this app uses standard caldav reading it makes assumptions about paths and treats them as if they all come from stalwart
+
+**TODO**
+1. Switch over to a golang caldav library, while I wanted to roll my own CalDAV I am too lazy to read up on the spec so imma just get someone else to do it
+2. Fix password login
+3. Actually write a UI that looks somewhat decent

auth/auth.go

@@ -0,0 +1,108 @@
+package auth
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"net/http"
+	"strings"
+
+	"astraltech.xyz/calendar/v2/caldav"
+	"astraltech.xyz/calendar/v2/webserver"
+	ics "github.com/arran4/golang-ical"
+	"golang.org/x/oauth2"
+)
+
+var TestTokenStore TokenStore
+
+func SetAuth() {
+	TestTokenStore = TokenStore{filePath: "token.json"}
+}
+
+func generateState() (string, error) {
+	b := make([]byte, 32)
+	if _, err := rand.Read(b); err != nil {
+		return "", err
+	}
+	return base64.RawURLEncoding.EncodeToString(b), nil
+}
+
+func HandlePasswordAuth(authData webserver.PasswordAuthData) bool {
+	calDavData := caldav.GetCalDAVData(authData.Username, authData.Password)
+
+	fmt.Printf("Users display name: %s\n", calDavData.DisplayName)
+	fmt.Printf("Calandar Count: %d\n", len(calDavData.Calandars))
+	for i := range len(calDavData.Calandars) {
+		calDavData.Calandars[i] = caldav.GetCalendarData(calDavData.Calandars[i], authData.Username, authData.Password)
+
+		fmt.Printf("Cal %d is named %s\n", i, calDavData.Calandars[i].DisplayName)
+		fmt.Printf("\tLink to cal: %s\n", calDavData.Calandars[i].Link)
+		fmt.Printf("\tEvent count: %d\n", len(calDavData.Calandars[i].Events))
+		for j := range len(calDavData.Calandars[i].Events) {
+			cal, err := ics.ParseCalendar(strings.NewReader(calDavData.Calandars[i].Events[j].CalData))
+			if err != nil {
+				fmt.Print(err.Error())
+			}
+			events := cal.Events()
+			for k := range len(events) {
+				name := events[k].GetProperty(ics.ComponentProperty(ics.PropertySummary)).Value
+				start, _ := events[k].GetStartAt()
+				end, _ := events[k].GetEndAt()
+				time := end.Sub(start)
+				fmt.Printf("\t\tEvent name: %s\n", name)
+				fmt.Printf("\t\t\tEvent start date: %s\n", end.UTC().String())
+				fmt.Printf("\t\t\tEvent length date: %s\n", time.String())
+
+			}
+		}
+	}
+	return false
+}
+
+func HandleOAuth(authData webserver.OAuthAuthData) bool {
+	state, err := generateState()
+	if err != nil {
+		http.Error(*authData.ResponseWriter, "Failed to generate state", http.StatusInternalServerError)
+		return false
+	}
+	verifier := oauth2.GenerateVerifier()
+
+	http.SetCookie(*authData.ResponseWriter, &http.Cookie{
+		Name:     "oauth_state",
+		Value:    state,
+		Path:     "/",
+		MaxAge:   300,
+		HttpOnly: true,
+		SameSite: http.SameSiteLaxMode,
+	})
+
+	http.SetCookie(*authData.ResponseWriter, &http.Cookie{
+		Name:     "pkce_verifier",
+		Value:    verifier,
+		Path:     "/",
+		HttpOnly: true,
+		SameSite: http.SameSiteLaxMode,
+	})
+
+	url := DefaultProvider.Config.AuthCodeURL(
+		state,
+		oauth2.S256ChallengeOption(verifier),
+	)
+	http.Redirect(*authData.ResponseWriter, authData.Request, url, http.StatusFound)
+
+	return false
+}
+
+func HandleAuthRequest(authType webserver.AuthStyle, authData webserver.AuthData) bool {
+	if authType == webserver.AuthStylePassword {
+		passwordAuthData, _ := authData.(webserver.PasswordAuthData)
+		return HandlePasswordAuth(passwordAuthData)
+	}
+
+	if authType == webserver.AuthStyleOAuth {
+		passwordAuthData, _ := authData.(webserver.OAuthAuthData)
+		return HandleOAuth(passwordAuthData)
+	}
+
+	return false
+}

auth/oauth.go

@@ -0,0 +1,49 @@
+package auth
+
+import (
+	"context"
+
+	"github.com/coreos/go-oidc/v3/oidc"
+	"golang.org/x/oauth2"
+)
+
+// This is all the user info that this script needs
+type UserInfo struct {
+	Email string `json:"email"`
+	Name  string `json:"name"`
+}
+
+type OAuthProvider struct {
+	Provider *oidc.Provider
+	Config   oauth2.Config
+}
+
+var Providers []OAuthProvider
+var DefaultProvider *OAuthProvider // Assumed to be the last created provider
+
+func CreateOAuthProvider(issuer string, clientID string) error {
+	ctx := context.Background()
+	provider, err := oidc.NewProvider(ctx, issuer)
+	if err != nil {
+		return err
+	}
+
+	OAuthConfig := oauth2.Config{
+		ClientID:    clientID,
+		RedirectURL: "http://localhost:8080/callback",
+		Endpoint:    provider.Endpoint(),
+		Scopes: []string{
+			oidc.ScopeOpenID,
+			"profile",
+			"email",
+		},
+	}
+
+	newProvider := OAuthProvider{
+		Provider: provider,
+		Config:   OAuthConfig,
+	}
+	Providers = append(Providers, newProvider)
+	DefaultProvider = &newProvider
+	return nil
+}

auth/oauth_callback.go

@@ -0,0 +1,52 @@
+package auth
+
+import (
+	"context"
+	"log"
+	"net/http"
+
+	"golang.org/x/oauth2"
+)
+
+// this is usually served at /callback
+func OAuthCallback(w http.ResponseWriter, r *http.Request) {
+	state := r.FormValue("state")
+	code := r.FormValue("code")
+
+	stateCookie, err := r.Cookie("oauth_state")
+	if err != nil {
+		http.Error(w, "Invalid state parameter", http.StatusBadRequest)
+		return
+	}
+	if state != stateCookie.Value {
+		http.Error(w, "Invalid state parameter", http.StatusBadRequest)
+		return
+	}
+
+	http.SetCookie(w, &http.Cookie{
+		Name:   "oauth_state",
+		Value:  "",
+		Path:   "/",
+		MaxAge: -1,
+	})
+
+	verifierCookie, err := r.Cookie("pkce_verifier")
+	if err != nil {
+		http.Error(w, "Missing PKCE verifier", http.StatusBadRequest)
+		return
+	}
+
+	verifier := verifierCookie.Value
+
+	token, err := DefaultProvider.Config.Exchange(context.Background(), code, oauth2.VerifierOption(verifier))
+	if err != nil {
+		http.Error(w, "Failed to exchange token: "+err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	if err := TestTokenStore.Save(token); err != nil {
+		log.Printf("Failed to save token: %v", err)
+	}
+
+	http.Redirect(w, r, "/calandar", http.StatusTemporaryRedirect)
+}

auth/token.go

@@ -0,0 +1,32 @@
+package auth
+
+import (
+	"encoding/json"
+	"os"
+
+	"golang.org/x/oauth2"
+)
+
+type TokenStore struct {
+	filePath string
+}
+
+func (ts *TokenStore) Save(token *oauth2.Token) error {
+	data, err := json.Marshal(token)
+	if err != nil {
+		return err
+	}
+	return os.WriteFile(ts.filePath, data, 0600)
+}
+
+func (ts *TokenStore) Load() (*oauth2.Token, error) {
+	data, err := os.ReadFile(ts.filePath)
+	if err != nil {
+		return nil, err
+	}
+	var token oauth2.Token
+	if err := json.Unmarshal(data, &token); err != nil {
+		return nil, err
+	}
+	return &token, nil
+}

caldav/dav_response.go

@@ -1,4 +1,4 @@
-package main
+package caldav
 
 type MultiStatus struct {
 	Responses []Response `xml:"response"`

caldav/dav_server.go

@@ -1,4 +1,4 @@
-package main
+package caldav
 
 import (
 	"encoding/xml"
@@ -20,10 +20,12 @@ const neededXML string = `
 	</d:propfind>
 	`
 
-var client *http.Client
+var BuildInClient *http.Client
+var serverURL string
 
-func init_dav_client() {
+func InitDavClient(url string) {
-	client = &http.Client{}
+	BuildInClient = &http.Client{}
+	serverURL = url
 }
 
 type Event struct {
@@ -41,11 +43,10 @@ type SimpleCalDavData struct {
 	Calandars   []Calandar
 }
 
-// this makes stalwart assumptions
+func GetCalDAVData(username string, password string) SimpleCalDavData {
-func get_caldav_data(username string, password string) SimpleCalDavData {
 	req, _ := http.NewRequest(
 		"PROPFIND",
-		serverConfig.URL+"/dav/cal/"+convert_username_into_url(username),
+		serverURL+"/dav/cal/"+convert_username_into_url(username),
 		strings.NewReader(neededXML),
 	)
 
@@ -53,7 +54,7 @@ func get_caldav_data(username string, password string) SimpleCalDavData {
 	req.Header.Set("Depth", "1")
 	req.Header.Set("Content-Type", "application/xml")
 
-	resp, err := client.Do(req)
+	resp, err := BuildInClient.Do(req)
 	if err != nil {
 		fmt.Print(err.Error())
 	}
@@ -61,13 +62,13 @@ func get_caldav_data(username string, password string) SimpleCalDavData {
 
 	body, err := io.ReadAll(resp.Body)
 	if err != nil {
-		log.Fatal(err)
+		fmt.Print(err.Error())
 	}
 
 	var davResp MultiStatus
 	err = xml.Unmarshal(body, &davResp)
 	if err != nil {
-		log.Fatal(err)
+		fmt.Print(err)
 	}
 
 	calandars := []Calandar{}
@@ -78,7 +79,7 @@ func get_caldav_data(username string, password string) SimpleCalDavData {
 
 		var new_cal Calandar = Calandar{
 			DisplayName: davResp.Responses[i].PropStat[0].Prop.DisplayName,
-			Link:        serverConfig.URL + davResp.Responses[i].Href,
+			Link:        serverURL + davResp.Responses[i].Href,
 		}
 
 		calandars = append(calandars, new_cal)
@@ -107,7 +108,7 @@ const XML_cal string = `
 </C:calendar-query>
 `
 
-func get_calandar_data(cal Calandar, username string, password string) Calandar {
+func GetCalendarData(cal Calandar, username string, password string) Calandar {
 	req, _ := http.NewRequest(
 		"REPORT",
 		cal.Link,
@@ -118,7 +119,7 @@ func get_calandar_data(cal Calandar, username string, password string) Calandar
 	req.Header.Set("Depth", "1")
 	req.Header.Set("Content-Type", "application/xml")
 
-	resp, err := client.Do(req)
+	resp, err := BuildInClient.Do(req)
 	if err != nil {
 		fmt.Print(err.Error())
 	}

caldav/helpers.go

@@ -1,4 +1,4 @@
-package main
+package caldav
 
 import "strings"
 

example.config.json

@@ -1,5 +1,6 @@
 {
-  "url:": "https://mx.example.com",
+  "caldav_url:": "https://mx.example.com",
-  "username": "admin@example.com",
+  "oauth_enabled": true,
-  "password": "password"
+  "oauth_issuer": "https://sso.example.com/application/o/stalwart/",
+  "oauth_clientid": "stalwart-webui"
 }

go.mod

@@ -2,4 +2,9 @@ module astraltech.xyz/calendar/v2
 
 go 1.26.1
 
-require github.com/arran4/golang-ical v0.3.5 // indirect
+require (
+	github.com/arran4/golang-ical v0.3.5
+	github.com/coreos/go-oidc/v3 v3.20.0
+	github.com/go-jose/go-jose/v4 v4.1.4
+	golang.org/x/oauth2 v0.36.0
+)

go.sum

@@ -1,2 +1,8 @@
 github.com/arran4/golang-ical v0.3.5 h1:bbz6ld4dC+MmCKiFfOd6SkmIGnhNMBACZ485ULh7p9A=
 github.com/arran4/golang-ical v0.3.5/go.mod h1:OnguFgjN0Hmx8jzpmWcC+AkHio94ujmLHKoaef7xQh8=
+github.com/coreos/go-oidc/v3 v3.20.0 h1:EtE0WIBHk03N+DqGkY4+UONzzZHk7amKt6IyNd7OsZE=
+github.com/coreos/go-oidc/v3 v3.20.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4=
+github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=
+github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
+golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
+golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=

main/calandar_endpoint.go

@@ -0,0 +1,52 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"text/template"
+
+	"astraltech.xyz/calendar/v2/auth"
+)
+
+type CalendarData struct {
+	DisplayName string
+}
+
+func ParseOAuthLogin(w http.ResponseWriter, r *http.Request) CalendarData {
+	token, err := auth.TestTokenStore.Load()
+	if err != nil {
+		http.Error(w, "Not authenticated", http.StatusUnauthorized)
+		return CalendarData{}
+	}
+
+	client := auth.DefaultProvider.Config.Client(context.Background(), token)
+
+	resp, err := client.Get(auth.DefaultProvider.Provider.UserInfoEndpoint())
+	if err != nil {
+		http.Error(w, "Failed to fetch user: "+err.Error(), http.StatusInternalServerError)
+		return CalendarData{}
+	}
+	defer resp.Body.Close()
+
+	var usersInfo auth.UserInfo
+	if err := json.NewDecoder(resp.Body).Decode(&usersInfo); err != nil {
+		http.Error(w, "Failed to decode response", http.StatusInternalServerError)
+		return CalendarData{}
+	}
+	return CalendarData{
+		DisplayName: usersInfo.Name,
+	}
+}
+
+func HandleCalandarEndpoint(w http.ResponseWriter, r *http.Request) {
+	var OauthLogin = true
+	var data CalendarData
+	if OauthLogin {
+		data = ParseOAuthLogin(w, r)
+	}
+
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	tmpl := template.Must(template.ParseFiles("main/pages/calendar.html"))
+	tmpl.Execute(w, data)
+}

main/config.go

@@ -7,9 +7,10 @@ import (
 )
 
 type Config struct {
-	URL      string `json:"url"`
+	URL           string `json:"caldav_url"`
-	Username string `json:"username"`
+	OAuthEnabled  bool   `json:"oauth_enabled"`
-	Password string `json:"password"`
+	OAuthIssuer   string `json:"oauth_issuer"`
+	OAuthClientID string `json:"oauth_clientid"`
 }
 
 var serverConfig Config

main/main.go

@@ -1,52 +1,29 @@
 package main
 
 import (
-	"net/http"
+	"astraltech.xyz/calendar/v2/auth"
-
+	"astraltech.xyz/calendar/v2/caldav"
 	"astraltech.xyz/calendar/v2/webserver"
 )
 
-func LoginHandler(w http.ResponseWriter, r *http.Request) {
-	w.Header().Set("Content-Type", "text/html; charset=utf-8")
-	var test_html string = "Hello, world"
-	w.Write([]byte(test_html))
-}
-
 func main() {
+	auth.SetAuth()
 	read_config()
-	init_dav_client()
 
-	webserver.ServeLoginPage("/login")
+	if serverConfig.OAuthEnabled {
+		auth.CreateOAuthProvider(serverConfig.OAuthIssuer, serverConfig.OAuthClientID)
+	}
+
+	caldav.InitDavClient(serverConfig.URL)
+
+	webserver.ServeLoginPage("/login", webserver.CustomizableLoginData{
+		ServiceName:         "Astral Calendar",
+		AuthRequestFunction: auth.HandleAuthRequest,
+	})
+	webserver.ServeWebpage("/callback", auth.OAuthCallback)
+	webserver.ServeWebpage("/calandar", HandleCalandarEndpoint)
+
 	webserver.EnableLogoRoute()
+	webserver.EnableStaticRoute()
 	webserver.ServeWebserver()
-
-	// calDavData := get_caldav_data(serverConfig.Username, serverConfig.Password)
-	// fmt.Println()
-
-	// fmt.Printf("Users display name: %s\n", calDavData.DisplayName)
-	// fmt.Printf("Calandar Count: %d\n", len(calDavData.Calandars))
-	// for i := range len(calDavData.Calandars) {
-	// 	calDavData.Calandars[i] = get_calandar_data(calDavData.Calandars[i], serverConfig.Username, serverConfig.Password)
-
-	// 	fmt.Printf("Cal %d is named %s\n", i, calDavData.Calandars[i].DisplayName)
-	// 	fmt.Printf("\tLink to cal: %s\n", calDavData.Calandars[i].Link)
-	// 	fmt.Printf("\tEvent count: %d\n", len(calDavData.Calandars[i].Events))
-	// 	for j := range len(calDavData.Calandars[i].Events) {
-	// 		cal, err := ics.ParseCalendar(strings.NewReader(calDavData.Calandars[i].Events[j].CalData))
-	// 		if err != nil {
-	// 			fmt.Print(err.Error())
-	// 		}
-	// 		events := cal.Events()
-	// 		for k := range len(events) {
-	// 			name := events[k].GetProperty(ics.ComponentProperty(ics.PropertySummary)).Value
-	// 			start, _ := events[k].GetStartAt()
-	// 			end, _ := events[k].GetEndAt()
-	// 			time := end.Sub(start)
-	// 			fmt.Printf("\t\tEvent name: %s\n", name)
-	// 			fmt.Printf("\t\t\tEvent start date: %s\n", end.UTC().String())
-	// 			fmt.Printf("\t\t\tEvent length date: %s\n", time.String())
-
-	// 		}
-	// 	}
-	// }
 }

main/pages/calendar.html

@@ -0,0 +1,11 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+	<meta charset="UTF-8">
+	<meta name="viewport" content="width=device-width, initial-scale=1.0">
+	<title>Astral Calendar</title>
+</head>
+<body>
+	Welcome to your calendar {{.DisplayName}}
+</body>
+</html>

webserver/login_page.go

@@ -8,20 +8,67 @@ import (
 
 type LoginPageData struct {
 	IsHiddenClassList string
+	LoginData         CustomizableLoginData
 }
+type AuthStyle int
+
+const (
+	AuthStylePassword AuthStyle = 0
+	AuthStyleOAuth    AuthStyle = 1
+)
+
+type AuthData interface{}
+
+type PasswordAuthData struct {
+	Username string
+	Password string
+}
+
+type OAuthAuthData struct {
+	ResponseWriter *http.ResponseWriter
+	Request        *http.Request
+}
+
+type CustomizableLoginData struct {
+	ServiceName         string
+	AuthRequestFunction func(AuthStyle, AuthData) bool
+}
+
+var LoginPageDataCustomizations CustomizableLoginData
 
 func loginHandler(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("Content-Type", "text/html; charset=utf-8")
 	tmpl := template.Must(template.ParseFiles("webserver/pages/login_page.html"))
 	if r.Method == http.MethodGet {
-		tmpl.Execute(w, LoginPageData{IsHiddenClassList: "hidden"})
+		tmpl.Execute(w, LoginPageData{IsHiddenClassList: "hidden", LoginData: LoginPageDataCustomizations})
 		return
 	}
 
 	if r.Method == http.MethodPost {
+		action := r.FormValue("action")
+
+		if action == "password" {
 			username := r.FormValue("username")
 			if strings.Contains(username, "/") {
-			tmpl.Execute(w, LoginPageData{IsHiddenClassList: ""})
+				tmpl.Execute(w, LoginPageData{IsHiddenClassList: "", LoginData: LoginPageDataCustomizations})
+			}
+			password := r.FormValue("password")
+
+			auth_success := LoginPageDataCustomizations.AuthRequestFunction(AuthStylePassword, PasswordAuthData{
+				Username: username,
+				Password: password,
+			})
+			if auth_success == false {
+				tmpl.Execute(w, LoginPageData{IsHiddenClassList: "", LoginData: LoginPageDataCustomizations})
+			}
+		} else {
+			auth_success := LoginPageDataCustomizations.AuthRequestFunction(AuthStyleOAuth, OAuthAuthData{
+				ResponseWriter: &w,
+				Request:        r,
+			})
+			if auth_success == false {
+				tmpl.Execute(w, LoginPageData{IsHiddenClassList: "", LoginData: LoginPageDataCustomizations})
+			}
 		}
 	}
 }

webserver/pages/login_page.html

@@ -13,27 +13,30 @@
 <img id="logo_image" alt="logo" src="/logo" />
 <form id="login_card" class="card" method="POST">
     <div id="welcome_text">
-        Welcome to Astral Tech, Please Sign in to your account below
+        Welcome to {{.LoginData.ServiceName}}, Please Sign in to your account below
     </div>
 
     <div class="error {{.IsHiddenClassList}}">
         ⚠️ Invalid username or password.
-        <button class="close_error_button">X</button>
+        <button class="close_error_button" type="button">X</button>
     </div>
 
     <div>
         <label class="input_label">Username</label><br />
-        <input type="text" name="username" placeholder="" required />
+        <input type="text" name="username" placeholder="" />
     </div>
 
     <div>
         <label class="input_label">Password</label><br />
         <div class="password_box">
-            <input type="password" name="password" placeholder="" required />
+            <input type="password" name="password" placeholder="" />
             <button type="button" class="show_password_toggle closed"></button>
         </div>
     </div>
-    <button type="submit">Login</button>
+    <div id="login_buttons">
+        <button type="submit" name="action" value="password">Login with password</button>
+        <button type="submit" id="login_with_oauth" name="action" value="oauth"><img src="/favicon.ico"/></button>
+    </div>
 </form>
 
 <script src="/static/error/error.js" type="text/javascript"></script>

webserver/static/card.css

@@ -0,0 +1,20 @@
+.card {
+    background: rgba(255, 255, 255, 1);
+    border: 1px solid var(--border-subtle);
+    border-radius: 12px;
+    padding: 2.5rem;
+    box-shadow: 0 4px 15px rgba(0, 0, 0, 0.03);
+    transition: transform 0.2s ease;
+
+    display: flex;
+    flex-direction: column;
+    gap: 15px;
+    overflow: hidden;
+}
+
+.static_center {
+    position: fixed;
+    left: 50%;
+    top: 50%;
+    transform: translateX(-50%) translateY(-50%);
+}

webserver/static/error/error.css

@@ -0,0 +1,30 @@
+.error {
+    background-color: var(--error-red) !important;
+    border-radius: 10px;
+    padding: 20px;
+    border-style: solid;
+    border-color: var(--error-border-red);
+    border-width: 1px;
+    box-sizing: border-box;
+    font-size: 12px;
+    position: relative;
+    color: white;
+    box-shadow: 0 2px 6px rgba(0, 0, 0, 0.1);
+}
+
+.close_error_button {
+    position: absolute !important;
+    background-color: rgba(0, 0, 0, 0) !important;
+    padding: 0px !important;
+    top: 20px;
+    right: 20px;
+    color: black !important;
+    font-weight: normal !important;
+    border: none;
+    width: fit-content !important;
+}
+
+.close_error_button:hover {
+    cursor: default;
+    font-weight: bold !important;
+}

webserver/static/error/error.js

@@ -0,0 +1,7 @@
+var error_close_buttons = document.getElementsByClassName("close_error_button");
+
+for (const close_button of error_close_buttons) {
+  close_button.addEventListener("click", function () {
+    this.parentElement.classList.add("hidden");
+  });
+}

webserver/static/javascript/show_password.js

@@ -0,0 +1,22 @@
+const showPasswordButtons = document.getElementsByClassName(
+  "show_password_toggle",
+);
+
+for (const button of showPasswordButtons) {
+  button.addEventListener("click", function () {
+    const input = this.parentElement.querySelector(
+      "input[type='password'], input[type='text']",
+    );
+    if (!input) return;
+    const isHidden = input.type === "password";
+    input.type = isHidden ? "text" : "password";
+
+    if (isHidden) {
+      this.classList.add("open");
+      this.classList.remove("closed");
+    } else {
+      this.classList.remove("open");
+      this.classList.add("closed");
+    }
+  });
+}

webserver/static/login_page.css

@@ -0,0 +1,55 @@
+#login_card {
+    position: fixed;
+    top: 50%;
+    left: 50%;
+    transform: translateX(-50%) translateY(-50%);
+    width: 350px;
+}
+
+#login_card input {
+    width: 324px;
+}
+
+#login_card div {
+    width: 100%;
+}
+
+#action-buttons {
+    justify-content: center;
+    display: flex;
+    gap: 15px;
+}
+
+#signup_button {
+    flex: 1;
+}
+
+#login_button {
+    flex: 2;
+}
+
+#welcome_text {
+    font-weight: 700;
+    font-size: 1.25rem;
+    margin-bottom: 8px;
+}
+
+#login_buttons {
+    display: grid;
+    grid-gap: 5px;
+    grid-template-columns: 1fr 43px;
+}
+
+#login_with_oauth {
+    padding: 0 !important;
+        position: relative;
+}
+
+#login_with_oauth img {
+    position: absolute;
+    width: 30px;
+    height: 30px;
+    top: 50%;
+    left: 50%;
+    transform: translateX(-50%) translateY(-50%);
+}

webserver/static/style.css

@@ -0,0 +1,151 @@
+:root {
+    /* Backgrounds */
+    --bg-main: #f7fff7; /* Soft Mint White */
+    --bg-card: #ffffff; /* Pure White Card */
+    --bg-input: #f0f4f8; /* Light Gray-Blue Inset */
+
+    /* Text & Lines */
+    --text-main: #1a202c; /* Deep Charcoal (Better than pure black) */
+    --text-muted: #718096; /* Cool Gray for placeholders */
+    --border-subtle: #e2e8f0; /* Light Gray border */
+
+    /* Action Colors */
+    --primary-accent: #1a535c; /* Deep Teal (Trustworthy/Secure) */
+    --primary-hover: #14434a; /* Darker Teal for hover */
+
+    --error-red: #ef4444; /* Professional Red */
+    --error-border-red: #e22d2d;
+
+    --warning-yellow: #fef08a;
+    --warning-border-yellow: #fde047;
+
+    --password-strength-weak: var(--error-red);
+    --password-strength-medium: var(--warning-border-yellow);
+    --password-strength-strong: #43ef6b;
+
+    font-family: "Inter", sans-serif;
+    -webkit-font-smoothing: antialiased;
+}
+
+body {
+    background-color: var(--bg-main);
+}
+
+button {
+    padding: 12px;
+    background-color: var(--primary-accent); /* Our Teal/Blue */
+    color: white;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    width: 100%;
+}
+
+button:hover {
+    background-color: var(--primary-hover);
+}
+
+button:focus {
+    outline: 2px solid var(--primary-accent);
+}
+
+input {
+    padding: 12px;
+    background-color: var(--bg-input);
+    border: 1px solid var(--border-subtle);
+    color: var(--text-main);
+    border-radius: 6px;
+}
+
+input:focus {
+    outline: 2px solid var(--primary-accent);
+}
+
+input::placeholder {
+    color: var(--text-muted);
+}
+
+.input_label {
+    color: var(--text-muted);
+    margin: 0;
+    padding: 0;
+    font-size: 15px;
+}
+
+.hidden {
+    display: none !important;
+}
+
+.blocked {
+    position: fixed; /* or absolute */
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+    z-index: 9999; /* higher = on top */
+
+    backdrop-filter: blur(4px);
+    background-color: rgba(0, 0, 0, 0.3);
+    pointer-events: all;
+}
+
+.dialouge_title {
+    font-size: 20px;
+    margin-bottom: 0px;
+    color: var(--text-main) !important;
+}
+
+.password_box {
+    position: relative;
+    display: inline-block;
+}
+
+.show_password_toggle {
+    width: 10px;
+    height: 10px;
+    position: absolute;
+    right: 5px;
+    bottom: 50%;
+    transform: translateY(50%);
+    background-size: contain;
+    background-repeat: no-repeat;
+    background-position: center;
+    background-color: rgba(0, 0, 0, 0);
+}
+
+.show_password_toggle.closed {
+    background-image: url("/static/images/closed_eye.png");
+}
+
+.show_password_toggle.open {
+    background-image: url("/static/images/filled_eye.png");
+}
+
+.show_password_toggle:hover {
+    background-color: rgba(0, 0, 0, 0);
+}
+
+.show_password_toggle:focus {
+    outline: none !important;
+}
+
+#logo_image {
+    position: fixed;
+    width: 300px;
+    left: 50%;
+    transform: translateX(-50%);
+}
+
+.subtext {
+    color: var(--text-muted);
+}
+
+.noselect {
+    -webkit-touch-callout: none;
+    -webkit-user-select: none;
+    -khtml-user-select: none;
+    -moz-user-select: none;
+    -ms-user-select: none;
+    user-select: none;
+}

webserver/webserver.go

@@ -7,7 +7,8 @@ import (
 
 var routes []string
 
-func ServeLoginPage(route string) {
+func ServeLoginPage(route string, data CustomizableLoginData) {
+	LoginPageDataCustomizations = data
 	ServeWebpage(route, loginHandler)
 }
 
@@ -21,6 +22,11 @@ func EnableLogoRoute() {
 	})
 }
 
+func EnableStaticRoute() {
+	http.Handle("/static/", http.StripPrefix("/static/", http.FileServer(http.Dir("webserver/static"))))
+	routes = append(routes, "/static/*")
+}
+
 func ServeWebpage(url string, handler func(http.ResponseWriter, *http.Request)) {
 	http.HandleFunc(url, handler)
 	routes = append(routes, url)