committing everything before round 2

internal/auth/handler.go

@@ -0,0 +1,21 @@
+package auth
+
+import (
+
+    "github.com/alexedwards/scs/v2"
+    "golang.org/x/crypto/bcrypt"
+)
+
+// remember, if anyone attempts to login as the system or zombie user, fail them. hard.
+
+// sessionManager needs to be figured out. do i inherit that from somewhere else?
+//   does it get associated with any other one like PHP's `session_open()` if i call it here?
+
+
+func set(writer http.ResponseWriter, request *http.Request) {
+    sessionManager.Put(request.Context(), "sessionKey", "message to be passed around")
+}
+
+func get(writer http.ResponseWriter, request *http.Request) String {
+    return sessionManager.GetString(request.Context(), "sessionKey")
+}

internal/auth/middleware.go

@@ -0,0 +1,3 @@
+package auth
+
+//import ()

internal/auth/oauth.go

@@ -0,0 +1,4 @@
+package auth
+
+//import ()
+

internal/auth/service.go

@@ -0,0 +1,16 @@
+package auth
+
+import (
+	"net/http"
+)
+
+
+func requireAuth(next http.Handler) http.Handler {
+    return http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+        if !sessionManager.Exists(request.Context(), "userID") {
+            http.Redirect(writer, request, "/login", http.StatusSeeOther)
+            return
+        }
+        next.ServeHTTP(writer, request)
+    })
+}