;;;; auth-routes.lisp - Authentication Routes for Asteroid Radio ;;;; Web routes for user authentication, registration, and management (in-package :asteroid) ;; Login page (GET) (define-page login #@"/login" () "User login page" (let ((username (radiance:post-var "username")) (password (radiance:post-var "password"))) (if (and username password) ;; Handle login form submission (let ((user (authenticate-user username password))) (if user (progn ;; Login successful - store user ID in session (format t "Login successful for user: ~a~%" (gethash "username" user)) (handler-case (progn (let ((user-id (gethash "_id" user))) (format t "User ID from DB: ~a~%" user-id) (setf (session:field "user-id") (if (listp user-id) (first user-id) user-id))) (radiance:redirect "/asteroid/admin")) (error (e) (format t "Session error: ~a~%" e) "Login successful but session error occurred"))) ;; Login failed - show form with error " Asteroid Radio - Login

🎵 ASTEROID RADIO - LOGIN

System Access

Invalid username or password

Default Admin Credentials:
Username: admin
Password: asteroid123

")) ;; Show login form (no POST data) " Asteroid Radio - Login

🎵 ASTEROID RADIO - LOGIN

System Access

Default Admin Credentials:
Username: admin
Password: asteroid123

"))) ;; Simple logout handler (define-page logout #@"/logout" () "Handle user logout" (setf (session:field "user-id") nil) (radiance:redirect "/asteroid/")) ;; API: Get all users (admin only) (define-page api-users #@"/api/users" () "API endpoint to get all users" (require-role :admin) (setf (radiance:header "Content-Type") "application/json") (handler-case (let ((users (get-all-users))) (cl-json:encode-json-to-string `(("status" . "success") ("users" . ,(mapcar (lambda (user) `(("id" . ,(gethash "_id" user)) ("username" . ,(gethash "username" user)) ("email" . ,(gethash "email" user)) ("role" . ,(gethash "role" user)) ("active" . ,(gethash "active" user)) ("created-date" . ,(gethash "created-date" user)) ("last-login" . ,(gethash "last-login" user)))) users))))) (error (e) (cl-json:encode-json-to-string `(("status" . "error") ("message" . ,(format nil "Error retrieving users: ~a" e))))))) ;; API: Get user statistics (admin only) (define-page api-user-stats #@"/api/user-stats" () "API endpoint to get user statistics" (require-role :admin) (setf (radiance:header "Content-Type") "application/json") (handler-case (let ((stats (get-user-stats))) (cl-json:encode-json-to-string `(("status" . "success") ("stats" . ,stats)))) (error (e) (cl-json:encode-json-to-string `(("status" . "error") ("message" . ,(format nil "Error retrieving user stats: ~a" e)))))))