go-tell/cmd/server/main.go

package main

import (
	"embed"
	"io/fs"
	"log"
	"net/http"
	"time"

	"github.com/danyel/go-tell/internal/config"
	"github.com/danyel/go-tell/internal/golooseauth"
	"github.com/danyel/go-tell/internal/security"
	"github.com/danyel/go-tell/internal/service"
	"github.com/danyel/go-tell/internal/web"
)

// web/dist holds the compiled React app. A placeholder file is committed so the
// embed directive always resolves, even when the frontend has not been built.
//
//go:embed all:web/dist
var ui embed.FS

func main() {
	cfg := config.Load()

	content, err := service.NewContentService(service.SeedContent(), cfg.ContentFile)
	if err != nil {
		log.Fatal(err)
	}

	assets, err := fs.Sub(ui, "web/dist")
	if err != nil {
		log.Fatal(err)
	}

	sso := security.NewSSOTokenVerifier(cfg.SSOHeader, cfg.SSOToken, cfg.SSOCookie)
	browser, err := golooseauth.New(cfg.GoLoose)
	if err != nil {
		log.Fatal(err)
	}
	var demo *service.DemoAuth
	if cfg.Profile == "demo" {
		demo = service.NewDemoAuth()
		log.Printf("CMS profile: demo (in-memory, %d seeded articles)", len(service.SeedContent()))
	} else {
		log.Printf("CMS profile: %s (SSO identity required; PostgreSQL URL configured: %t)", cfg.Profile, cfg.PostgresURL != "")
	}
	if browser != nil {
		log.Printf("Go Loose login enabled for tenant %q", cfg.GoLoose.Tenant)
	} else {
		log.Print("Go Loose login disabled: set GO_LOOSE_CLIENT_ID and GO_LOOSE_CLIENT_SECRET to enable it")
	}
	server := &http.Server{
		Addr:              cfg.HTTPAddr,
		Handler:           web.NewHandler(content, assets, sso, browser, demo).Routes(cfg.AllowedOrigins),
		ReadHeaderTimeout: 10 * time.Second,
	}
	log.Printf("CMS listening on %s", cfg.HTTPAddr)
	if err = server.ListenAndServe(); err != nil {
		log.Fatal(err)
	}
}