Move Foundry Core to Go and add remote checks

cmd/foundry/main.go

@@ -0,0 +1,54 @@
+package main
+
+import (
+	"encoding/json"
+	"log"
+	"net"
+	"net/http"
+	"net/url"
+	"os"
+	"time"
+
+	"gitea.entroia.com/Zayden-Jung/foundry-core/internal/auth"
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/stdlib"
+)
+
+func env(key, fallback string) string {
+	if value := os.Getenv(key); value != "" {
+		return value
+	}
+	return fallback
+}
+
+func main() {
+	origin, err := url.Parse(os.Getenv("PUBLIC_ORIGIN"))
+	if err != nil || origin.Scheme != "https" || origin.Hostname() == "" || origin.User != nil ||
+		(origin.Path != "" && origin.Path != "/") || origin.RawQuery != "" || origin.Fragment != "" {
+		log.Fatal("PUBLIC_ORIGIN must be an HTTPS origin")
+	}
+	var callbacks map[string]string
+	if err := json.Unmarshal([]byte(os.Getenv("FOUNDRY_PROJECTS")), &callbacks); err != nil || len(callbacks) == 0 {
+		log.Fatal("FOUNDRY_PROJECTS must configure at least one project")
+	}
+	id, secret, dsn := os.Getenv("GOOGLE_CLIENT_ID"), os.Getenv("GOOGLE_CLIENT_SECRET"), os.Getenv("DATABASE_URL")
+	if id == "" || secret == "" || dsn == "" {
+		log.Fatal("Google credentials and DATABASE_URL are required")
+	}
+	config, err := pgx.ParseConfig(dsn)
+	if err != nil {
+		log.Fatal("Invalid DATABASE_URL")
+	}
+	db := stdlib.OpenDB(*config)
+	defer db.Close()
+	handler, err := auth.New(db, callbacks, origin.ResolveReference(&url.URL{Path: "/auth/google/callback"}).String(), id, secret)
+	if err != nil {
+		log.Fatal(err)
+	}
+	server := &http.Server{
+		Addr:    net.JoinHostPort(env("HOST", "127.0.0.1"), env("PORT", "8080")),
+		Handler: handler, ReadHeaderTimeout: 5 * time.Second, ReadTimeout: 10 * time.Second,
+		WriteTimeout: 30 * time.Second, IdleTimeout: 60 * time.Second,
+	}
+	log.Fatal(server.ListenAndServe())
+}