Middleware ir nav antraštė

Keturi failai kaip skirtukai, priklausomybių tvarka: middleware.go → nav.go → layout.templ → home.templ (užklausos vamzdynas, antraštės duomenų modelis, tada du šablonai, kurie jį naudoja). Paskutiniai du — pakeitimai.

1. internal/handlers/middleware.go (naujas) — trys dalys:

func (h *Handlers) LoadUser(next http.Handler) http.Handler { /* slapukas → kontekstas, neblokuoja */ }
func (h *Handlers) RequireAuth(next http.Handler) http.Handler { /* nėra vartotojo → nukreipia /login */ }
func UserFrom(ctx context.Context) (db.User, bool) { /* išima vartotoją atgal */ }

Vartotojas keliauja užklausoje tipizuotu konteksto raktu (userCtxKey), privačiu ctxKey tipu, tad niekas kitas su juo nesusidurs. LoadUser užloguoja tikrą DB klaidą, bet vis tiek aptarnauja užklausą kaip anoniminę — viena netvarkinga užklausa neturėtų nugriauti viso puslapio.

2. internal/web/nav.go (naujas) — mažas modelis, kurio reikia antraštei:

type Nav struct {
	LoggedIn bool
	Email    string
}

(CSRFToken laukas prisijungs 6 pamokoje.)

3. internal/web/layout.templ (modify) — statinį antraštės šūkį pakeičia tikra navigacija, besišakojanti pagal nav.LoggedIn:

if nav.LoggedIn {
	<a href="/dashboard">Dashboard</a>
	<span class="who">{ nav.Email }</span>
	<form method="post" action="/logout"><button>Log out</button></form>
} else {
	<a href="/login">Log in</a>
	<a href="/register">Register</a>
}

Layout dabar ima antrą parametrą, nav Nav — tad kiekvienas puslapis jį perduoda.

4. internal/web/home.templ (modify) — vienintelė maketo pakeitimo pasekmė: Home(userCount int64) tampa Home(nav Nav, userCount int64) ir paduoda nav į @Layout("Home", nav). Puslapio kūnas nepaliestas.

Kol kas niekas naujo neatvaizduojama — joks apdorotojas nesukuria nav ir nekviečia LoadUser. Tai — kito žingsnio darbas, kur ateina prisijungimas bei atsijungimas ir antraštė atgyja.

middleware.go SUKURTI

Sukurk šį failą kataloge internal/handlers/

package handlers

import (
	"context"
	"errors"
	"net/http"

	"github.com/programuoki/signflow/internal/db"
	"github.com/programuoki/signflow/internal/session"
)

type ctxKey int

const userCtxKey ctxKey = iota

// LoadUser resolves the session cookie into the current user and stashes it in
// the request context. It never blocks anonymous requests — it just annotates
// them — so it can wrap every route.
func (h *Handlers) LoadUser(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		user, err := h.Sessions.User(r.Context(), r)
		if err == nil {
			r = r.WithContext(context.WithValue(r.Context(), userCtxKey, user))
		} else if !errors.Is(err, session.ErrNoSession) {
			// A real DB error is worth logging, but we still serve the request
			// as anonymous rather than 500 the whole site.
			h.Log.Error("load user from session", "err", err)
		}
		next.ServeHTTP(w, r)
	})
}

// RequireAuth blocks routes that need a signed-in user, redirecting to login.
func (h *Handlers) RequireAuth(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		if _, ok := UserFrom(r.Context()); !ok {
			http.Redirect(w, r, "/login", http.StatusSeeOther)
			return
		}
		next.ServeHTTP(w, r)
	})
}

// UserFrom returns the current user from the context, if any.
func UserFrom(ctx context.Context) (db.User, bool) {
	u, ok := ctx.Value(userCtxKey).(db.User)
	return u, ok
}

nav.go SUKURTI

Sukurk šį failą kataloge internal/web/

package web

// Nav carries the per-request bits the layout header needs: whether someone is
// signed in, and their email. A CSRF token joins it in lesson 6, once forms are
// protected.
type Nav struct {
	LoggedIn bool
	Email    string
}

layout.templ MODIFIKUOTI 13 eilučių pakeista

Redaguok šį failą kataloge internal/web/

package web

// Layout is the shared HTML shell. Page templates call it and pass their body
// as children. htmx is vendored under /static/js so the app has no runtime CDN
// dependency.
templ Layout(title string, nav Nav) {
	<!DOCTYPE html>
	<html lang="en">
		<head>
			<meta charset="utf-8"/>
			<meta name="viewport" content="width=device-width, initial-scale=1"/>
			<title>{ title } · SignFlow</title>
			<link rel="stylesheet" href="/static/css/style.css"/>
			<script src="/static/js/htmx.min.js"></script>
		</head>
		<body>
			<header class="topbar">
				<a href="/" class="brand">✍️ SignFlow</a>
				<nav class="topnav">
					if nav.LoggedIn {
						<a href="/dashboard">Dashboard</a>
						<span class="who">{ nav.Email }</span>
						<form method="post" action="/logout" class="inline-form">
							<button type="submit" class="btn btn-ghost btn-sm">Log out</button>
						</form>
					} else {
						<a href="/login">Log in</a>
						<a href="/register" class="btn btn-primary btn-sm">Register</a>
					}
				</nav>
			</header>
			<main class="container">
				{ children... }
			</main>
			<footer class="footer">
				<p>SignFlow — reference app for the Programuoki server-side web track.</p>
			</footer>
		</body>
	</html>
}

home.templ MODIFIKUOTI 2 eilutės pakeistos

Redaguok šį failą kataloge internal/web/

package web

import "strconv"

// Home is the public landing page. It also proves the full stack is wired: the
// user count comes from Postgres via sqlc.
templ Home(nav Nav, userCount int64) {
	@Layout("Home", nav) {
		<section class="hero">
			<h1>Sign documents. Keep the receipts.</h1>
			<p class="lead">
				Upload a document, invite signers by email, and collect typed
				signatures. Every action lands in an append-only audit trail.
			</p>
			<div class="cta-row">
				<a class="btn btn-primary" href="/register">Get started</a>
				<a class="btn btn-ghost" href="/login">Log in</a>
			</div>
		</section>
		<section class="status-card">
			<h2>Skeleton status</h2>
			<ul class="checklist">
				<li>✅ Chi router + middleware</li>
				<li>✅ Templ rendering this page</li>
				<li>✅ Postgres connected via pgx</li>
				<li>✅ goose migrations applied</li>
			</ul>
			<p class="muted">
				Registered users in the database: <strong>{ strconv.FormatInt(userCount, 10) }</strong>
			</p>
		</section>
	}
}