config.ru

require 'sinatra'
require 'tilt'
require 'json'
require 'haml'
require 'mustache'
require 'sinatra/mustache'
require 'openid_connect'
require 'cgi'
require './lib/roadmap'
require './lib/helpers'

  Tilt.register "ham", Tilt[:haml]

  r = Roadmap.new("src")

  use Rack::Session::Pool, :expire_after => 60 * 60
  set :session_secret, ENV['session_secret']

  helpers do

    def before_render template, data={}
      Mustache.template_file = template
      m = Mustache.new
      yield m if block_given?
      haml m.render data
    end

  end

  before do
    expires 500, :public, :must_revalidate
  end

  before '/' do
    request.path_info = '/index.html'
  end

  ## Login workflow
  get '/status' do
      cache_control :no_cache
      @profile = session[:profile]
      @profile ? (haml :logged, :layout=>false) : (haml :notlogged, :layout=>false)
  end

  get '/logout' do
    session.delete :profile
    redirect 'https://fcp.integ01.dev-franceconnect.fr/api/v1/logout'
  end

  get '/login' do
    session[:state] = Random::DEFAULT.rand.to_s
    client = OpenIDConnect::Client.new(
      identifier: ENV['FranceConnect_Key'],
      secret: ENV['FranceConnect_Secret'],
      redirect_uri: 'http://institut-agile.fr/oidc_callback',
      host: 'fcp.integ01.dev-franceconnect.fr',
      authorization_endpoint: '/api/v1/authorize',
      token_endpoint: '/api/v1/token',
      userinfo_endpoint: '/api/v1/userinfo'
    )
    authorization_uri = client.authorization_uri(
      state: session[:state],
      scope: [:profile, :email]
    )
    puts authorization_uri
    redirect authorization_uri
  end

  get '/oidc_callback' do
    begin
      client = OpenIDConnect::Client.new(
        identifier: ENV['FranceConnect_Key'],
        secret: ENV['FranceConnect_Secret'],
        redirect_uri: 'http://institut-agile.fr/oidc_callback',
        host: 'fcp.integ01.dev-franceconnect.fr',
        authorization_endpoint: '/api/v1/authorize',
        token_endpoint: '/api/v1/token',
        userinfo_endpoint: '/api/v1/userinfo'
      )
      client.authorization_code = params[:code]
      token = client.access_token! (:acid)
      access_token = OpenIDConnect::AccessToken.new(
        access_token: token,
        client: client
      )
      session[:profile] = @profile = access_token.userinfo!
    rescue Exception => e
      puts e
    end
    where = params[:backto] || "/";
    puts "Logged in: #{@profile.given_name} #{@profile.family_name}" if @profile
    redirect to(where)
  end

  ## Dynamic content

  get '/index_json' do
    content_type 'text/json', :charset => 'utf-8'
    r.all.to_json
  end

  get '/index_alpha.html' do
    before_render "views/index.tmpl" do |m|
      m[:parts] = r.all_by_alpha
      m[:order] = "ordre alphabétique"
    end
  end

  get '/index_type.html' do
    before_render "views/index.tmpl" do |m|
      m[:parts] = r.all_by_type
      m[:order] = "type"
    end
  end

  get '/*.html' do
    src = r.find_by_id(params[:splat].first)
    pass unless src
    @default_layout = nil
    headers["Access-Control-Allow-Origin"]="*"
    page = before_render "views/practice.tmpl", src
  end

  get '/comments/:id' do |id|
    cache_control :no_cache
    @id = id
    mustache :disqus, :layout => false
  end

  ## Static content
  ['index','outils','ebook','inconnu'].each do |static|
    get "/#{static}.html" do
      haml static.intern
    end
  end

  ## Static assets
  before '/assets/AgileDeAaZ.pdf' do
    puts "PDF: #{@profile.first_name} #{@profile.last_name}" if @profile
  end

  get '/assets/*' do |file|
    send_file File.join('site',request.path)
  end

  ['/*.js','*.css'].each do |path|
    get path do |file|
      send_file File.join('site/assets',request.path)
    end
  end

  not_found do
    "<h1>Cette page n'existe pas</h1>"
  end

run Sinatra::Application