feat: add permissions on user create, CORS middleware, cors server playground.

2026-04-24 10:55:40 +02:00
parent d629bd52eb
commit 2fd3a1d57b
8 changed files with 179 additions and 3 deletions
@@ -0,0 +1,58 @@
+package main
+
+import (
+	"flag"
+	"log"
+	"net/http"
+)
+
+// Define a string constant containing the HTML for the webpage. This consists of a <h1>
+// header tag, and some JavaScript which calls our POST /v1/tokens/authentication
+// endpoint and writes the response body to inside the <div id="output"></div> tag.
+const html = `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+</head>
+<body>
+    <h1>Preflight CORS</h1>
+    <div id="output"></div>
+    <script>
+        document.addEventListener('DOMContentLoaded', function() {
+            fetch("http://localhost:4000/v1/tokens/authentication", {
+                method: "POST",
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    email: 'alice@example.com',
+                    password: 'pa55word'
+                })
+            }).then(
+                function (response) {
+                    response.text().then(function (text) {
+                        document.getElementById("output").inner
+t.getElementById("output").innerHTML = text;
+                    });
+                }, 
+                function(err) {
+                    document.getElementById("output").innerHTML = err;
+                }
+            );
+        });
+    </script>
+</body>
+</html>`
+
+func main() {
+	addr := flag.String("addr", ":9000", "Server address")
+	flag.Parse()
+
+	log.Printf("starting server on %s", *addr)
+
+	err := http.ListenAndServe(*addr, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.Write([]byte(html))
+	}))
+	log.Fatal(err)
+}