From b27a7914993f5a5a87160dc33431a6fa1f4ad323 Mon Sep 17 00:00:00 2001
From: Joris Guyonvarch
Date: Sat, 18 Jul 2015 17:36:35 +0200
Subject: Securing the index page with the login session

---
 src/server/Application.hs | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

(limited to 'src/server/Application.hs')

diff --git a/src/server/Application.hs b/src/server/Application.hs
index 377d1ff..b83273f 100644
--- a/src/server/Application.hs
+++ b/src/server/Application.hs
@@ -28,14 +28,19 @@ import qualified Data.Text.Lazy as TL
 
 import qualified LoginSession
 
+import qualified Secure
+
 import Model.Database (runDb)
 import Model.User
 import Model.Payment
 
 import View.Page (page)
+
 getIndexAction :: ActionM ()
-getIndexAction = do
-  html $ page
+getIndexAction =
+  Secure.loggedAction (\_ ->
+    html $ page
+  )
 
 getUsersAction :: ActionM ()
 getUsersAction = do
@@ -69,8 +74,8 @@ insertPaymentAction email name cost = do
       html "Not found"
 
 signIn :: Text -> ActionM ()
-signIn value = do
-  LoginSession.put value
+signIn login = do
+  LoginSession.put login
   html "Ok"
 
 checkConnection :: ActionM ()
-- 
cgit v1.2.3