Use password from environment

This commit is contained in:
Claudio Ortolina
2024-10-21 08:54:46 +01:00
parent 4fcfc6c921
commit 214d12f6cb
3 changed files with 17 additions and 4 deletions
@@ -7,10 +7,8 @@ defmodule MusicLibraryWeb.SessionController do
conn |> render(:new, form: @empty_form, layout: {MusicLibraryWeb.Layouts, "unauthenticated"})
end
def create(conn, params) do
password = params["password"]
if password == "password" do
def create(conn, %{"password" => request_password}) do
if Plug.Crypto.secure_compare(password(), request_password) do
conn
|> put_session(:logged_in, true)
|> redirect(to: "/")
@@ -20,4 +18,9 @@ defmodule MusicLibraryWeb.SessionController do
|> redirect(to: ~p"/login")
end
end
def password do
Application.get_env(:music_library, MusicLibraryWeb)
|> Keyword.fetch!(:auth_password)
end
end