8b54ff4bec
- Add LogoutHandler: deletes session row (D-06), clears cookie, redirects to /login
- Protect GET / inside RequireAuth group; remove old top-level registration
- Add POST /logout inside same RequireAuth group (D-22: POST-only logout)
- Update Layout signature to accept *auth.User; render logout form + email when authed
- Update Index template to accept *auth.User and show "Signed in as {email}"
- Update SignupPage/LoginPage to pass nil to Layout (auth pages are unauthed)
- Update IndexHandler to pull user from auth.Authed(ctx) and pass to template
- Update TestIndex_RendersHxGet -> TestIndex_UnauthRedirects (GET / now protected)
- AUTH-04 (logout) and AUTH-05 (protected /) are now closed
|
||
|---|---|---|
| .. | ||
| ui | ||
| handlers.go | ||
| handlers_auth.go | ||
| handlers_auth_test.go | ||
| handlers_test.go | ||
| middleware.go | ||
| router.go | ||
| slog.go | ||
| testdb_test.go | ||