How do I implement basic & simple authentication form with Plack::Middleware::Auth::Form

There is two issues for me.

This plugin does not care about CSRF vulnerable.
- User logout from your web site unexpectedly.
There is no localization API

But it works.

#!/usr/bin/env
use strict;
use warnings;
use 5.010001;
use Plack::Builder;
use Plack::Request;

sub dispatch_secret {
    return [
        200,
        [],
        [<<'...'],
<!doctype html>
<html>
<head>
<title>This is a secret web page</title>
</head>
<body>
    <div style="font-size: 500%; color: red">This is a secret web page</div>
    <form method="post" action="/logout"><input type="submit" value="logout" /></a>
</body>
</html>
...
    ]
}

builder {
    enable 'Session';
    enable 'Auth::Form',
        authenticator => sub {
            $_[0] eq 'dankogai' && $_[1] eq 'kogaidan';
        };

    sub {
        my $req = Plack::Request->new(shift);

        if ($req->session->{user_id}) {
            given ($req->path_info) {
            when ('/') {
                return dispatch_secret();
            }
            default {
                return [404, [], []];
            }
            }
        } else {
           my $res = Plack::Response->new();
           $res->redirect('/login');
           return $res->finalize;
        }
    }
};

Published: 2011-03-28(Mon) 08:15