feat: OKO-109 guest account

Author: piotrpdev

backend/src/web/app.rs

@@ -58,10 +58,13 @@ use super::{ImageContainer, MdnsChannelMessage};
 
 // TODO: Maybe use `std::future::pending::<()>();` instead of sleeping forever
 
+// TODO: Change default admin and guest hashes, remember to search and update where they're hardcoded
 const SQLITE_URL: &str = "sqlite://data.db";
 const VIDEO_PATH: &str = "./videos/";
 const DEFAULT_ADMIN_USERNAME: &str = "admin";
 const DEFAULT_ADMIN_PASS_HASH: &str = "$argon2id$v=19$m=19456,t=2,p=1$VE0e3g7DalWHgDwou3nuRA$uC6TER156UQpk0lNQ5+jHM0l5poVjPA1he/Tyn9J4Zw";
+const DEFAULT_GUEST_USERNAME: &str = "guest";
+const DEFAULT_GUEST_PASS_HASH: &str = "$argon2id$v=19$m=19456,t=2,p=1$VE0e3g7DalWHgDwou3nuRA$uC6TER156UQpk0lNQ5+jHM0l5poVjPA1he/Tyn9J4Zw";
 const EXPIRED_SESSION_DELETION_INTERVAL: tokio::time::Duration =
     tokio::time::Duration::from_secs(60);
 const SESSION_DURATION: Duration = Duration::days(1);
@@ -142,6 +145,21 @@ impl App {
             admin.create_using_self(&self.db).await?;
         }
 
+        // ? Maybe make this optional just in case
+        let guest_exists = User::get_using_username(&self.db, DEFAULT_GUEST_USERNAME)
+            .await
+            .is_ok();
+        if !guest_exists {
+            let mut guest = User {
+                user_id: User::DEFAULT.user_id,
+                username: "guest".to_string(),
+                password_hash: DEFAULT_GUEST_PASS_HASH.to_owned(),
+                created_at: User::DEFAULT.created_at(),
+            };
+
+            guest.create_using_self(&self.db).await?;
+        }
+
         // Session layer.
         //
         // This uses `tower-sessions` to establish a layer that will provide the session

frontend/src/routes/Login.svelte

@@ -7,8 +7,13 @@
   import { replace } from "svelte-spa-router";
   import { user } from "../lib/stores/userStore";
 
-  let username = "admin";
-  let password = "hunter42";
+  const DEFAULT_ADMIN_USERNAME = "admin";
+  const DEFAULT_ADMIN_PASSWORD = "hunter42";
+  const DEFAULT_GUEST_USERNAME = "guest";
+  const DEFAULT_GUEST_PASSWORD = "hunter42";
+
+  let username = import.meta.env.DEV ? DEFAULT_ADMIN_USERNAME : "";
+  let password = import.meta.env.DEV ? DEFAULT_ADMIN_PASSWORD : "";
 
   async function handleSubmit() {
     const response = await fetch("/api/login", {
@@ -76,8 +81,21 @@
             />
           </div>
         </Card.Content>
-        <Card.Footer>
+        <Card.Footer class="flex-col gap-4">
           <Button id="login" class="w-full" type="submit">Sign in</Button>
+          <Button
+            id="login-guest"
+            variant="outline"
+            class="w-full"
+            type="button"
+            on:click={() => {
+              username = DEFAULT_GUEST_USERNAME;
+              password = DEFAULT_GUEST_PASSWORD;
+              handleSubmit();
+            }}
+          >
+            Sign in as Guest
+          </Button>
         </Card.Footer>
       </form>
     </Card.Root>