From 1b0fd5f840e4e60d9b41f02f798f75cc1dc4450d Mon Sep 17 00:00:00 2001
From: Laurent <laurent.crema@gmail.com>
Date: Fri, 5 Dec 2025 08:54:45 +0100
Subject: [PATCH] Finish implementation of protected routes but passwords must
 still be encrypted

---
 assets/pages/index.html                           | 15 ++++++++++++++-
 .../src/interceptors/RequestInterceptor.java      | 13 ++-----------
 2 files changed, 16 insertions(+), 12 deletions(-)

diff --git a/assets/pages/index.html b/assets/pages/index.html
index 4c35695..90bae11 100644
--- a/assets/pages/index.html
+++ b/assets/pages/index.html
@@ -32,6 +32,18 @@
 
 <script>
 
+    function redirectToProtectedRoute(route) {
+        let data = JSON.parse(localStorage.getItem("creds"));
+
+        fetch(route, {
+            headers: {
+                "Authorization": `Basic ${data.username}:${data.password}`
+            }
+        })
+            .then(r => r.text())
+            .then(html => document.body.innerHTML = html);
+    }
+
     let btn = document.getElementById("connect-button");
     btn.addEventListener("click", async () => {
         let username = document.getElementById("username-field").value;
@@ -50,7 +62,8 @@
             body: JSON.stringify(data)})
             .then(response => {
                 if(response.ok) {
-                    window.location.href = "/payment";
+                    localStorage.setItem("creds", JSON.stringify(data));
+                    redirectToProtectedRoute("/payment");
                 } else {
                     throw new Error("Authentication request failed")
                 }
diff --git a/src/main/java/httpsServer/httpServer/src/interceptors/RequestInterceptor.java b/src/main/java/httpsServer/httpServer/src/interceptors/RequestInterceptor.java
index 9b8023c..39f6e23 100644
--- a/src/main/java/httpsServer/httpServer/src/interceptors/RequestInterceptor.java
+++ b/src/main/java/httpsServer/httpServer/src/interceptors/RequestInterceptor.java
@@ -5,28 +5,20 @@ import com.sun.net.httpserver.HttpExchange;
 import httpsServer.httpServer.src.annotations.AllowedVerb;
 import httpsServer.httpServer.src.annotations.OnlyAuthorizedClients;
 import httpsServer.httpServer.src.authorization.AuthorizedClients;
-import httpsServer.httpServer.src.authorization.Client;
 import httpsServer.httpServer.src.exceptions.NoSuchVerbException;
 import httpsServer.httpServer.src.exceptions.ClientAuthorisationException;
 
-import java.io.BufferedReader;
 import java.io.IOException;
-import java.io.InputStream;
-import java.io.InputStreamReader;
 import java.lang.reflect.*;
-import java.nio.Buffer;
-import java.nio.charset.StandardCharsets;
 import java.util.Base64;
 
 public class RequestInterceptor implements InvocationHandler {
 
     private final AuthorizedClients authorizedClients;
-    private final ObjectMapper mapper;
     private final Object target;
 
     public RequestInterceptor(Object target) {
         authorizedClients = new AuthorizedClients();
-        mapper = new ObjectMapper();
         this.target = target;
     }
 
@@ -71,9 +63,8 @@ public class RequestInterceptor implements InvocationHandler {
             throw new ClientAuthorisationException("Unable to read body");
         }
 
-        String base64Credentials = authHeader.substring("Basic ".length());
-        String credentials = new String(Base64.getDecoder().decode(base64Credentials));
-        String[] values = credentials.split(":", 1);
+        String credentials = authHeader.substring("Basic ".length());
+        String[] values = credentials.split(":", 2);
         String username = values[0];
         String password = values[1];