main.go

package main

import (
	"WebRest/controller"
	"WebRest/helper"
	"net/http"

	"github.com/gin-gonic/gin"
	csrf "github.com/utrack/gin-csrf"
)

func main() {
	serverApplication()
}

func serverApplication() {
	route := gin.Default()

	route.Static("public", "./public")
	route.StaticFile("/favicon.ico", "./favicon.ico")
	route.LoadHTMLGlob("templates/*")

	route.MaxMultipartMemory = 8 << 20

	route.Use(func(g *gin.Context) {
		csrf.Middleware(csrf.Options{
			Secret: "my_key",
			ErrorFunc: func(g *gin.Context) {
				g.HTML(http.StatusBadRequest, "index.html", gin.H{
					"error": "CSRF token mismatch",
				})
				g.Abort()
			},
		})
		g.Header("X-Frame-Options", "DENY")
		g.Header("Content-Security-Policy", "default-src 'self'; connect-src *; font-src *; script-src-elem * 'unsafe-inline'; img-src * data:; style-src * 'unsafe-inline';")
		g.Header("X-XSS-Protection", "1; mode=block")
		g.Header("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload")
		g.Header("Referrer-Policy", "strict-origin")
		g.Header("X-Content-Type-Options", "nosniff")
		g.Header("Permissions-Policy", "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()")
		g.Next()
	})

	route.GET("/", controller.HomePage)
	route.POST("/", helper.MiddlewareJWT(), controller.RespBook)
	route.GET("/login", controller.LoginGet)
	route.POST("/login", controller.Login)
	route.GET("/register", controller.RegGet)
	route.POST("/register", controller.Resgister)
	route.GET("/logout", controller.LogOut)
	route.GET("/people", controller.BookPeople)
	route.GET("/menu", controller.Menu)
	route.POST("/menu", controller.MenuIns)

	route.Run("localhost:8080")
}