Use password from environment
This commit is contained in:
@@ -7,10 +7,8 @@ defmodule MusicLibraryWeb.SessionController do
|
||||
conn |> render(:new, form: @empty_form, layout: {MusicLibraryWeb.Layouts, "unauthenticated"})
|
||||
end
|
||||
|
||||
def create(conn, params) do
|
||||
password = params["password"]
|
||||
|
||||
if password == "password" do
|
||||
def create(conn, %{"password" => request_password}) do
|
||||
if Plug.Crypto.secure_compare(password(), request_password) do
|
||||
conn
|
||||
|> put_session(:logged_in, true)
|
||||
|> redirect(to: "/")
|
||||
@@ -20,4 +18,9 @@ defmodule MusicLibraryWeb.SessionController do
|
||||
|> redirect(to: ~p"/login")
|
||||
end
|
||||
end
|
||||
|
||||
def password do
|
||||
Application.get_env(:music_library, MusicLibraryWeb)
|
||||
|> Keyword.fetch!(:auth_password)
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user