preparations for styling: refactor template rendering #1
|
@ -3,6 +3,7 @@ package controllers
|
|||
import (
|
||||
"fmt"
|
||||
"html/template"
|
||||
"log"
|
||||
"net/http"
|
||||
"officeHours/models"
|
||||
"os"
|
||||
|
@ -14,33 +15,45 @@ var funcs = template.FuncMap{
|
|||
}
|
||||
var baseTemplate = template.Must(template.ParseFiles("templates/base.html")).New("base.html").Funcs(funcs)
|
||||
|
||||
// Execute a rendered full HTML page.
|
||||
//
|
||||
// If you just want to fill a template snippet, use the RawTemplates object.
|
||||
//
|
||||
// Parameters:
|
||||
// - name is the name of the template file inside templates/, without .html suffix.
|
||||
// - data is passed through to the template
|
||||
func (b *BaseHandler) serveTemplate(w http.ResponseWriter, name string, data any) {
|
||||
full_name := "templates/" + name + ".html"
|
||||
|
||||
// check that template exists
|
||||
info, err := os.Stat(full_name)
|
||||
if (err != nil && os.IsNotExist(err)) || info.IsDir() {
|
||||
errMsg := fmt.Sprintf("Template %s nicht gefunden", full_name)
|
||||
johannes marked this conversation as resolved
Outdated
Gonne
commented
This could be an actual error using This could be an actual error using `fmt.Errorf`.
Furthermore I began logging in English. We should make that consistent.
|
||||
log.Println(errMsg)
|
||||
w.WriteHeader(http.StatusNotFound)
|
||||
johannes marked this conversation as resolved
Outdated
Gonne
commented
I think, that StatusNotFound is for user supplied references (e.g. a course or a room id), but this should be an internal server error. I think, that StatusNotFound is for user supplied references (e.g. a course or a room id), but this should be an internal server error.
|
||||
w.Write([]byte("404: Template nicht gefunden."))
|
||||
w.Write([]byte(errMsg))
|
||||
return
|
||||
}
|
||||
|
||||
tmpl, err := baseTemplate.ParseFiles(full_name)
|
||||
Gonne
commented
Using this construction each template is parsed again and again, while it would be sufficient to parse them all on startup and later just execute them. Using this construction each template is parsed again and again, while it would be sufficient to parse them all on startup and later just execute them.
johannes
commented
Fixed (and spent too much time implementing this ^^) Fixed (and spent too much time implementing this ^^)
|
||||
if err != nil {
|
||||
// TODO: log.Printf
|
||||
errMsg := fmt.Sprintf("Template %s konnte nicht geparst werden : %s", full_name, err.Error())
|
||||
Gonne
commented
This could be an actual error using Furthermore error wrapping is something cool I just learnt. This could be an actual error using `fmt.Errorf`.
Furthermore I began logging in English. We should make that consistent.
Furthermore [error wrapping](https://blog.boot.dev/golang/wrapping-errors-in-go-how-to-handle-nested-errors/) is something cool I just learnt.
johannes
commented
Error wrapping looks nice. I started doing that. In general it seems best to wrap errors which occur during runtime from the beginning of a http request handler, which then logs the error and returns an error page to the user. (I added an inline TODO about that) Errors on startup however can just abort the whole program, like I implemented in Error wrapping looks nice. I started doing that.
In general it seems best to wrap errors which occur during runtime from the beginning of a http request handler, which then logs the error and returns an error page to the user. (I added an inline TODO about that)
Errors on startup however can just abort the whole program, like I implemented in `main.go`
|
||||
log.Println(errMsg)
|
||||
w.WriteHeader(http.StatusInternalServerError)
|
||||
w.Write([]byte(fmt.Sprintf("500: Template "+full_name+" konnte nicht geparst werden : %s", err.Error())))
|
||||
w.Write([]byte(errMsg))
|
||||
return
|
||||
}
|
||||
// TODO: cache templates in parsed state, but not executed
|
||||
err = template.Must(tmpl.Clone()).Execute(w, data)
|
||||
if err != nil {
|
||||
// TODO: log.Printf
|
||||
errMsg := fmt.Sprintf("Template %s konnte nicht ausgeführt werden : %s", full_name, err.Error())
|
||||
johannes marked this conversation as resolved
Outdated
Gonne
commented
This could be an actual error using Furthermore error wrapping is something cool I just learnt. This could be an actual error using `fmt.Errorf`.
Furthermore I began logging in English. We should make that consistent.
Furthermore [error wrapping](https://blog.boot.dev/golang/wrapping-errors-in-go-how-to-handle-nested-errors/) is something cool I just learnt.
|
||||
log.Println(errMsg)
|
||||
w.WriteHeader(http.StatusInternalServerError)
|
||||
w.Write([]byte(fmt.Sprintf("500: Template "+full_name+" konnte nicht ausgeführt werden : %s", err.Error())))
|
||||
w.Write([]byte(errMsg))
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
// standalone templates that should not be wrapped into the base.html
|
||||
var RawTemplates = template.Must(template.New("").Funcs(funcs).ParseFiles(
|
||||
"templates/confirmationMail",
|
||||
"templates/td.html",
|
||||
|
|
Here we should consider checking whether the name is restricted to something like
[a-zA-Z0-9]
to prevent directory traversal. Possibly it is sufficient to forbid/
and/or.
This is not longer relevant, since all available templates are listed in one place inside our code and we do not parse filenames from anywhere else.