about summary refs log tree commit diff
path: root/src/App.hs
diff options
context:
space:
mode:
Diffstat (limited to 'src/App.hs')
-rw-r--r--src/App.hs12
1 files changed, 9 insertions, 3 deletions
diff --git a/src/App.hs b/src/App.hs
index ff292ff2cd16..e5b8de7e7e7f 100644
--- a/src/App.hs
+++ b/src/App.hs
@@ -153,7 +153,7 @@ server config@T.Config{..} = createAccount
             _ -> liftIO $ Trips.list dbFile accountUsername
 
     login :: T.AccountCredentials
-          -> Handler (Headers '[Header "Set-Cookie" SetCookie] NoContent)
+          -> Handler (Headers '[Header "Set-Cookie" SetCookie] T.Session)
     login (T.AccountCredentials username password) = do
       mAccount <- liftIO $ Accounts.lookup dbFile username
       case mAccount of
@@ -163,7 +163,10 @@ server config@T.Config{..} = createAccount
             Nothing ->
               if T.passwordsMatch password accountPassword then do
                 uuid <- liftIO $ Sessions.findOrCreate dbFile account
-                pure $ addHeader (Auth.mkCookie uuid) NoContent
+                pure $ addHeader (Auth.mkCookie uuid)
+                  T.Session{ sessionUsername = accountUsername
+                           , sessionRole = accountRole
+                           }
               else do
                 liftIO $ LoginAttempts.increment dbFile username
                 throwError err401 { errBody = "Your credentials are invalid" }
@@ -172,7 +175,10 @@ server config@T.Config{..} = createAccount
                 throwError err429
               else if T.passwordsMatch password accountPassword then do
                 uuid <- liftIO $ Sessions.findOrCreate dbFile account
-                pure $ addHeader (Auth.mkCookie uuid) NoContent
+                pure $ addHeader (Auth.mkCookie uuid)
+                  T.Session{ sessionUsername = accountUsername
+                           , sessionRole = accountRole
+                           }
               else do
                 liftIO $ LoginAttempts.increment dbFile username
                 throwError err401 { errBody = "Your credentials are invalid" }