mirror of
https://github.com/fly-apps/live_beats.git
synced 2024-05-20 10:08:07 +00:00
94 lines
2.7 KiB
Elixir
94 lines
2.7 KiB
Elixir
defmodule LiveBeatsWeb.Router do
|
|
use LiveBeatsWeb, :router
|
|
|
|
import LiveBeatsWeb.UserAuth, only: [redirect_if_user_is_authenticated: 2]
|
|
|
|
pipeline :browser do
|
|
plug :accepts, ["html"]
|
|
plug :fetch_session
|
|
plug :fetch_live_flash
|
|
plug :put_root_layout, {LiveBeatsWeb.LayoutView, :root}
|
|
plug :protect_from_forgery
|
|
plug :put_secure_browser_headers
|
|
plug :put_nonce
|
|
end
|
|
|
|
pipeline :api do
|
|
plug :accepts, ["json"]
|
|
end
|
|
|
|
scope "/", LiveBeatsWeb do
|
|
pipe_through :browser
|
|
|
|
delete "/signout", OAuthCallbackController, :sign_out
|
|
|
|
live_session :default, on_mount: [{LiveBeatsWeb.UserAuth, :current_user}, LiveBeatsWeb.Nav] do
|
|
live "/signin", SignInLive, :index
|
|
end
|
|
|
|
live_session :authenticated, on_mount: [{LiveBeatsWeb.UserAuth, :ensure_authenticated}, LiveBeatsWeb.Nav] do
|
|
live "/", HomeLive, :index
|
|
live "/songs", SongLive.Index, :index
|
|
live "/songs/new", SongLive.Index, :new
|
|
live "/songs/:id/edit", SongLive.Index, :edit
|
|
live "/songs/:id", SongLive.Show, :show
|
|
live "/songs/:id/show/edit", SongLive.Show, :edit
|
|
end
|
|
end
|
|
|
|
scope "/", LiveBeatsWeb do
|
|
pipe_through [:browser, :redirect_if_user_is_authenticated]
|
|
|
|
get "/oauth/callbacks/:provider", OAuthCallbackController, :new
|
|
end
|
|
|
|
# Other scopes may use custom stacks.
|
|
# scope "/api", LiveBeatsWeb do
|
|
# pipe_through :api
|
|
# end
|
|
|
|
# Enables LiveDashboard only for development
|
|
#
|
|
# If you want to use the LiveDashboard in production, you should put
|
|
# it behind authentication and allow only admins to access it.
|
|
# If your application does not have an admins-only section yet,
|
|
# you can use Plug.BasicAuth to set up some basic authentication
|
|
# as long as you are also using SSL (which you should anyway).
|
|
if Mix.env() in [:dev, :test] do
|
|
import Phoenix.LiveDashboard.Router
|
|
|
|
scope "/" do
|
|
pipe_through :browser
|
|
live_dashboard "/dashboard", metrics: LiveBeatsWeb.Telemetry
|
|
end
|
|
end
|
|
|
|
# Enables the Swoosh mailbox preview in development.
|
|
#
|
|
# Note that preview only shows emails that were sent by the same
|
|
# node running the Phoenix server.
|
|
if Mix.env() == :dev do
|
|
scope "/dev" do
|
|
pipe_through :browser
|
|
|
|
forward "/mailbox", Plug.Swoosh.MailboxPreview
|
|
end
|
|
end
|
|
|
|
defp put_nonce(conn, _) do
|
|
nonce = Phoenix.HTML.Tag.csrf_token_value()
|
|
endpoint = Phoenix.Controller.endpoint_module(conn)
|
|
url = endpoint.url()
|
|
uri = endpoint.struct_url()
|
|
ws_url = %URI{uri | scheme: "ws"}
|
|
wss_url = %URI{uri | scheme: "wss"}
|
|
|
|
conn
|
|
|> put_session(:nonce, nonce)
|
|
|> put_resp_header(
|
|
"content-security-policy",
|
|
"script-src 'nonce-#{nonce}' #{url} #{ws_url}; connect-src 'self' #{ws_url} #{wss_url}"
|
|
)
|
|
end
|
|
end
|