Dancer2...Tutorial(3)

build a whole blog

git clone https://github.com/PerlDancer/DLBlog.git
cpan Dancer2
cpanm Dancer2
dancer2 gen -a DLBlog
+ DLBlog
+ DLBlog/.dancer
+ DLBlog/config.yml
+ DLBlog/cpanfile
+ DLBlog/Makefile.PL
+ DLBlog/MANIFEST.SKIP
+ DLBlog/t
+ DLBlog/t/002_index_route.t
+ DLBlog/t/001_base.t
+ DLBlog/environments
+ DLBlog/environments/production.yml
+ DLBlog/environments/development.yml
+ DLBlog/bin
+ DLBlog/bin/app.psgi
+ DLBlog/views
+ DLBlog/views/index.tt
+ DLBlog/public
+ DLBlog/public/dispatch.cgi
+ DLBlog/public/404.html
+ DLBlog/public/favicon.ico
+ DLBlog/public/500.html
+ DLBlog/public/dispatch.fcgi
+ DLBlog/lib
+ DLBlog/lib/DLBlog.pm
+ DLBlog/views/layouts
+ DLBlog/views/layouts/main.tt
+ DLBlog/public/images
+ DLBlog/public/images/perldancer.jpg
+ DLBlog/public/images/perldancer-bg.jpg
+ DLBlog/public/javascripts
+ DLBlog/public/javascripts/jquery.js
+ DLBlog/public/css
+ DLBlog/public/css/style.css
+ DLBlog/public/css/error.css

Your new application is ready! To run it:

    cd DLBlog
    plackup bin/app.psgi

To access your application, point your browser to http://localhost:5000

If you need community assistance, the following resources are available:
- Dancer website: https://perldancer.org
- Twitter: https://twitter.com/PerlDancer/
- GitHub: https://github.com/PerlDancer/Dancer2/
- Mailing list: https://lists.perldancer.org/mailman/listinfo/dancer-users
- IRC: irc.perl.org#dancer

Happy Dancing!
cd DLBlog
plackup -r bin/app.psgi
# template engine
# tiny: default basic template engine
# template_toolkit: TT

#template: "tiny"

template: "template_toolkit"
engines:
  template:
    template_toolkit:
      # Note: start_tag and end_tag are regexes
      start_tag: '<%'
      end_tag:   '%>'
get '/create' => sub {
    return "Show the entry form";
};
post '/create' => sub {
    return "Creates the new blog entry";
};
get '/entry/:id' => sub {
    my $id = route_parameters->get('id');
    return "Showing entry ID $id";
};
get '/update/:id' => sub {
    my $id = route_parameters->get('id');
    return "Show the update form for entry id $id";
};

post '/update/:id' => sub {
    my $id = route_parameters->get('id');
    return "Updates the specified blog entry";
};
get '/delete/:id' => sub {
    my $id = route_parameters->get('id');
    return "Show the delete confirmation for entry id $id";
};

post '/delete/:id' => sub {
    my $id = route_parameters->get('id');
    return "Deletes the specified blog entry";
};
get '/' => sub {
    return "Show the list of blog entries";
};
package DLBlog;
use Dancer2;

get '/' => sub {
    return "Show the list of blog entries";
};

get '/entry/:id' => sub {
    my $id = route_parameters->get('id');
    return "Showing entry ID $id";
};

get '/create' => sub {
    return "Show the entry form";
};

post '/create' => sub {
    return "Creates the new blog entry";
};

get '/update/:id' => sub {
    my $id = route_parameters->get('id');
    return "Show the update form for entry id $id";
};

post '/update/:id' => sub {
    my $id = route_parameters->get('id');
    return "Updates the specified blog entry";
};

get '/delete/:id' => sub {
    my $id = route_parameters->get('id');
    return "Show the delete confirmation for entry id $id";
};

post '/delete/:id' => sub {
    my $id = route_parameters->get('id');
    return "Deletes the specified blog entry";
};

true;
plackup -r bin/app.psgi
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="<% settings.charset %>">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
    <title><% title %></title>
    <link rel="stylesheet" href="<% request.uri_base %>/css/style.css">
  </head>
  <body>
    <% content %>
    <div id="footer">
    Powered by <a href="https://perldancer.org/">Dancer2</a> <% dancer_version %>
    </div>
  </body>
</html>
<div id="entries">
<% IF entries.size %>
    <dl>
    <% FOREACH entry IN entries %>
        <dt><a href="/entry/<% entry.id %>"><% entry.title | html_entity %></a>
            (created at <% entry.created_at | html_entity %>)</dt>
        <dd><% entry.summary | html_entity %></dd>
    <% END %>
    </dl>
<% ELSE %>
    <p>No entries found.</p>
<% END %>
</div>
get '/' => sub {
    my @entries; # We'll populate this later
    template 'index', { entries => \@entries };
};
<% IF entry %>
<div id="sidebar">
    <h1>Posted at</h1>
    <p><% entry.created_at | html_entity %></p>
    <h1>Summary</h1>
    <p><% entry.summary | html_entity %></p>
</div>
<div id="content">
    <h2><% entry.title | html_entity %></h2>
    <p><% entry.content | html_entity %></p>
<% ELSE %>
    <p>Invalid entry.</p>
<% END %>
</div>
get '/entry/:id' => sub {
    my $id = route_parameters->get('id');
    my $entry; # Populated from the database later
    template 'entry', { entry => $entry };
};
<div id="create">
    <form method="post" action="<% request.uri_for('/create') %>">
        <label for="title">Title</label>
        <input type="text" name="title" id="title"><br>
        <label for="summary">Summary</label>
        <input type="text" name="summary" id="summary"><br>
        <label for="content">Content</label>
        <textarea name="content" id="content" cols="50" rows="10"></textarea><br>
        <input type="submit">
    </form>
</div>
get '/create' => sub {
    template 'create';
};
post '/create' => sub {
    my $new_id = 1;
    redirect uri_for "/entry/$new_id"; # redirect does not need a return
};
get '/update/:id' => sub {
    my $id = route_parameters->get('id');
    template 'create';
};
post '/update/:id' => sub {
    my $id = route_parameters->get('id');
    redirect uri_for "/entry/$id"; # redirect does not need a return
};
<div id="delete">
    <form method="post" action="<% request.uri_for('/delete/' _ id) %>">
        <p>Delete entry <% id %>. Are you sure?</p>
        <p>
            <input type="radio" id="yes" name="delete_it" value="yes">
            <label for="yes">Yes</label>
        </p>
        <p>
            <input type="radio" id="no" name="delete_it" value="no">
            <label for="no">No</label>
        </p>
        <input type="submit">
    </form>
</div>
get '/delete/:id' => sub {
    my $id = route_parameters->get('id');
    template 'delete', { id => $id };
};
post '/delete/:id' => sub {
    my $id = route_parameters->get('id');

    # Always default to not destroying data
    my $delete_it = body_parameters->get('delete_it') // 0;

    if( $delete_it ) {
        # Do the deletion here
        redirect uri_for "/";
    } else {
        # Display our entry again
        redirect uri_for "/entry/$id";
    }
};
package DLBlog;
use Dancer2;

get '/' => sub {
    my @entries; # We'll populate this later
    template 'index', { entries => \@entries };
};

get '/entry/:id' => sub {
    my $id = route_parameters->get('id');
    my $entry; # Populated from the database later
    template 'entry', { entry => $entry };
};

get '/create' => sub {
    template 'create';
};

post '/create' => sub {
    my $new_id = 1;
    redirect uri_for "/entry/$new_id"; # redirect does not need a return
};

get '/update/:id' => sub {
    my $id = route_parameters->get('id');
    template 'create';
};

post '/update/:id' => sub {
    my $id = route_parameters->get('id');
    redirect uri_for "/entry/$id";
};

get '/delete/:id' => sub {
    my $id = route_parameters->get('id');
    template 'delete', { id => $id };
};

post '/delete/:id' => sub {
    my $id = route_parameters->get('id');

    # Always default to not destroying data
    my $delete_it = body_parameters->get('delete_it') // 0;

    if( $delete_it ) {
        # Do the deletion here
        redirect uri_for "/";
    } else {
        # Display our entry again
        redirect uri_for "/entry/$id";
    }
};

true;
<div id="menu">
    <a href="<% request.uri_for('/') %>">List All Entries</a>&nbsp;|&nbsp;
    <a href="<% request.uri_for('/create') %>">Create New Entry</a>
</div>
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="<% settings.charset %>">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
    <title><% title %></title>
    <link rel="stylesheet" href="<% request.uri_base %>/css/style.css">
  </head>
  <body>
    <div id="menu">
        <a href="<% request.uri_for('/') %>">List All Entries</a>&nbsp;|&nbsp;
        <a href="<% request.uri_for('/create') %>">Create New Entry</a>
    </div>
    <% content %>
    <div id="footer">
    Powered by <a href="https://perldancer.org/">Dancer2</a> <% dancer_version %>
    </div>
  </body>
</html>
$ mkdir db
CREATE TABLE entries (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    title TEXT NOT NULL,
    summary TEXT NOT NULL,
    content TEXT NOT NULL,
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);
$ sqlite3 db/dlblog.db < db/entries.sql
cpanm DBD::SQLite Dancer2::Plugin::DBIx::Class \
    DBIx::Class::Schema::Loader DateTime::Format::SQLite
requires "DBD::SQLite";
requires "Dancer2::Plugin::DBIx::Class";
requires "DBIx::Class::Schema::Loader";
requires "DateTime::Format::SQLite";
use Dancer2::Plugin::DBIx::Class;
plugins:
  DBIx::Class:
    default:
      dsn: "dbi:SQLite:dbname=db/dlblog.db"
      schema_class: "DLBlog::Schema"
      dbi_params:
        RaiseError: 1
        AutoCommit: 1
dbicdump -o dump_directory=./lib \
    -o components='["InflateColumn::DateTime"]' \
    DLBlog::Schema dbi:SQLite:db/dlblog.db '{ quote_char => "\"" }'
<div id="create">
    <form method="post" action="<% request.uri_for('/create') %>">
        <label for="title">Title</label>
        <input type="text" name="title" id="title"><br>
        <label for="summary">Summary</label>
        <input type="text" name="summary" id="summary"><br>
        <label for="content">Content</label>
        <textarea name="content" id="content" cols="50" rows="10"></textarea><br>
        <button type="submit">Save Entry</button>
    </form>
</div>
post '/create' => sub {
    my $params = body_parameters();

    my $entry = do {
        try {
            resultset('Entry')->create( $params->as_hashref );
        }
        catch( $e ) {
            error "Database error: $e";
            var error_message => 'A database error occurred; your entry could not be created',
            forward '/create', {}, { method => 'GET' };
        }
    };
    redirect uri_for "/entry/" . $entry->id; # redirect does not need a return
};
my $params = body_parameters();
cpanm Feature::Compat::Try
requires "Feature::Compat::Try";
use Feature::Compat::Try;
try {
    resultset('Entry')->create( $params->as_hashref );
}
catch( $e ) {
    error "Database error: $e";
    var error_message => 'A database error occurred; your entry could not be created',
    forward '/create', {}, { method => 'GET' };
}
forward uri_for '/create', {}, { method => 'GET' };
debug 'Created entry ' . $entry->id . ' for "' . $entry->title . '"';
redirect uri_for "/entry/" . $entry->id; # redirect does not need a return
var $_ => $params->{ $_ } foreach qw< title summary content >;
my @missing = grep { $params->{$_} eq '' } qw< title summary content >;
if( @missing ) {
    var missing => join ",", @missing;
    warning "Missing parameters: " . var 'missing';
    forward '/create', {}, { method => 'GET' };
}
post '/create' => sub {
    my $params = body_parameters();
    var $_ => $params->{ $_ } foreach qw< title summary content >;

    my @missing = grep { $params->{$_} eq '' } qw< title summary content >;
    if( @missing ) {
        var missing => join ",", @missing;
        warning "Missing parameters: " . var 'missing';
        forward '/create', {}, { method => 'GET' };
    }

    my $entry = do {
        try {
            resultset('Entry')->create( $params->as_hashref );
        }
        catch( $e ) {
            error "Database error: $e";
            var error_message => 'A database error occurred; your entry could not be created',
            forward '/create', {}, { method => 'GET' };
        }
    };

    debug 'Created entry ' . $entry->id . ' for "' . $entry->title . '"';
    redirect uri_for "/entry/" . $entry->id; # redirect does not need a return
};
<div id="create">
    <form method="post" action="<% request.uri_for('/create') %>">
        <label for="title">Title</label>
        <input type="text" name="title" id="title" value="<% vars.title %>"><br>
        <label for="summary">Summary</label>
        <input type="text" name="summary" id="summary" value="<% vars.summary %>"><br>
        <label for="content">Content</label>
        <textarea name="content" id="content" cols="50" rows="10"><% vars.content %></textarea><br>
        <button type="submit">Save Entry</button>
    </form>
</div>
<% IF vars.missing %>
<div id="missing">
    <b>Missing parameters: <% vars.missing | html_entity %></b>
</div>
<% END %>
<% IF error_message %>
<div id="error">
    <b>Error: <% vars.error_message | html_entity %></b>
</div>
<% END %>
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="<% settings.charset %>">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">
    <title><% title %></title>
    <link rel="stylesheet" href="<% request.uri_base %>/css/style.css">
  </head>
  <body>
    <div id="menu">
        <a href="<% request.uri_for('/') %>">List All Entries</a>&nbsp;|&nbsp;
        <a href="<% request.uri_for('/create') %>">Create New Entry</a>
    </div>
    <% IF vars.missing %>
    <div id="missing">
        <b>Missing parameters: <% vars.missing | html_entity %></b>
    </div>
    <% END %>
    <% IF error_message %>
    <div id="error">
        <b>Error: <% vars.error_message | html_entity %></b>
    </div>
    <% END %>
    <% content %>
    <div id="footer">
    Powered by <a href="https://perldancer.org/">Dancer2</a> <% dancer_version %>
    </div>
  </body>
</html>
get '/entry/:id[Int]' => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    template 'entry', { entry => $entry };
};
<% IF entry %>
<div id="sidebar">
    <h1>Posted at</h1>
    <p><% entry.created_at | html_entity %></p>
    <h1>Summary</h1>
    <p><% entry.summary | html_entity %></p>
</div>
<div id="content">
    <h2><% entry.title | html_entity %></h2>
    <p><% entry.content | html_entity %></p>
<% ELSE %>
    <p>Invalid entry.</p>
<% END %>
</div>
<div id="create_update">
    <form method="post" action="<% post_to %>">
        <label for="title">title</label>
        <input type="text" name="title" id="title" value="<% vars.title %>"><br>
        <label for="summary">summary</label>
        <input type="text" name="summary" id="summary" value="<% vars.summary %>"><br>
        <label for="content">content</label>
        <textarea name="content" id="content" cols="50" rows="10"><% vars.content %></textarea><br>
        <button type="submit">Save Entry</button>
    </form>
</div>
get '/update/:id[Int]' => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    var $_ => $entry->$_ foreach qw< title summary content >;
    template 'create_update', { post_to => uri_for "/update/$id" };
};
post '/update/:id[Int]' => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    if( !$entry ) {
        status 'not_found';
        return "Attempt to update non-existent entry $id";
    }

    my $params = body_parameters();
    var $_ => $params->{ $_ } foreach qw< title summary content >;
    my @missing = grep { $params->{$_} eq '' } qw< title summary content >;
    if( @missing ) {
        var missing => join ",", @missing;
        warning "Missing parameters: " . var 'missing';
        forward "/update/$id", {}, { method => 'GET' };
    }

    try {
        $entry->update( $params->as_hashref );
    }
    catch( $e ) {
        error "Database error: $e";
        var error_message => 'A database error occurred; your entry could not be updated',
        forward "/update/$id", {}, { method => 'GET' };
    }
    redirect uri_for "/entry/" . $entry->id; # redirect does not need a return
};
if( !$entry ) {
    status 'not_found';
    return "Attempt to update non-existent entry $id";
}
get '/create' => sub {
    # Vars are passed to templates automatically
    template 'create_update', { post_to => uri_for '/create' };
};
get '/delete/:id[Int]' => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    template 'delete', { entry => $entry };
};
<% IF entry %>
<div id="delete">
    <form method="post" action="<% request.uri_for('/delete/' _ entry.id) %>">
        <p>Delete entry <% entry.id %>. Are you sure?</p>
        <div>
            <input type="radio" id="yes" name="delete_it" value="yes">
            <label for="yes">Yes</label>
        </div>
        <div class="form-check">
            <input type="radio" id="no" name="delete_it" value="no">
            <label for="no">No</label>
        </div><br>
        <button type="submit">Delete Entry</button>
    </form>
<% ELSE %>
    <p>Invalid entry.</p>
<% END %>
</div>
post '/delete/:id[Int]' sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    if( !$entry ) {
        status 'not_found';
        return "Attempt to delete non-existent entry $id";
    }

    # Always default to not destroying data
    my $delete_it = body_parameters->get('delete_it') // 0;

    if( $delete_it ) {
        $entry->delete;
        redirect uri_for "/";
    } else {
        # Display our entry again
        redirect uri_for "/entry/$id";
    }
};
session: "YAML"

engines:
  session:
    YAML:
      cookie_name: dlblog.session
template: "template_toolkit"
session: "YAML"
engines:
  template:
    template_toolkit:
      # Note: start_tag and end_tag are regexes
      start_tag: '<%'
      end_tag:   '%>'
  session:
    YAML:
      cookie_name: dlblog.session
session user => 'admin';
my $user = session 'user';
$ cat sessions/<some session id>.yml
---
user: admin
CREATE TABLE users (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    username VARCHAR NOT NULL UNIQUE,
    password VARCHAR NOT NULL
);
sqlite3 db/dlblog.db < db/users.sql
dbicdump -o dump_directory=./lib \
    -o components='["InflateColumn::DateTime"]' \
    DLBlog::Schema dbi:SQLite:db/dlblog.db '{ quote_char => "\"" }'
cpanm Dancer2::Plugin::CryptPassphrase
requires "Dancer2::Plugin::CryptPassphrase";
CryptPassphrase:
  encoder:
    module: Argon2
    parallelism: 2
perl -MCrypt::Passphrase -E \
    'my $auth=Crypt::Passphrase->new(encoder=>"Argon2"); say $auth->hash_password("test")'
sqlite3 db/dlblog.db

sqlite> INSERT INTO users (username, password)
VALUES (
    'admin',
    '$argon2id$v=19$m=262144,t=3,p=1$07krd3DaNn3b9JplNPSjnA$CiFKqjqgecDiYoV0qq0QsZn2GXmORkia2YIhgn/dbBo'
); -- admin/test

sqlite> .quit
cpanm Dancer2::Plugin::Auth::Tiny
requires "Dancer2::Plugin::Auth::Tiny";
use Dancer2::Plugin::Auth::Tiny;
use Dancer2::Plugin::CryptPassphrase;
<div id="login">
    <% IF login_error %>
    <div>
        Invalid username or password
    </div>
    <% END %>
    <form method="post" action="<% request.uri_for('/login') %>">
        <div>
            <label for="username">Username</label>
            <input type="text" name="username" id="username">
        </div>
        <div>
            <label for="password">Password</label>
            <input type="password" name="password" id="password">
        </div>
        <input type="hidden" name="return_url" id="return_url" value="<% return_url %>">
        <button type="submit">Login</button>
    </form>
</div>
get '/login' => sub {
    template 'login' => { return_url => params->{ return_url } };
};
post '/login' => sub {
    my $username = body_parameters->get('username');
    my $password = body_parameters->get('password');
    my $return_url = body_parameters->get('return_url');

    my $user = resultset( 'User' )->find({ username => $username });
    if ( $user and verify_password( $password, $user->password) ) {
        app->change_session_id;
        session user => $username;
        info "$username successfully logged in";
        return redirect $return_url || '/';
    }
    else {
        warning "Failed login attempt for $username";
        template 'login' => { login_error => 1, return_url => $return_url };
    }
};
get '/logout' => sub {
    app->destroy_session;
    redirect uri_for "/";
};
get '/create' => needs login => sub {
package DLBlog;
use Dancer2;
use Dancer2::Plugin::DBIx::Class;
use Dancer2::Plugin::Auth::Tiny;
use Dancer2::Plugin::CryptPassphrase;
use Feature::Compat::Try;

get '/' => sub {
    # Give us the most recent first
    my @entries = resultset('Entry')->search(
        {},
        { order_by => { -desc => 'created_at' } },
    )->all;
    template 'index', { entries => \@entries };
};

get '/entry/:id[Int]' => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    template 'entry', { entry => $entry };
};

get '/create' => needs login => sub {
    # Vars are passed to templates automatically
    template 'create_update', { post_to => uri_for '/create' };
};

post '/create' => needs login => sub {
    my $params = body_parameters();
    var $_ => $params->{ $_ } foreach qw< title summary content >;

    my @missing = grep { $params->{$_} eq '' } qw< title summary content >;
    if( @missing ) {
        var missing => join ",", @missing;
        warning "Missing parameters: " . var 'missing';
        forward '/create', {}, { method => 'GET' };
    }

    my $entry = do {
        try {
            resultset('Entry')->create( $params->as_hashref );
        }
        catch( $e ) {
            error "Database error: $e";
            var error_message => 'A database error occurred; your entry could not be created',
            forward '/create', {}, { method => 'GET' };
        }
    };

    debug 'Created entry ' . $entry->id . ' for "' . $entry->title . '"';
    redirect uri_for "/entry/" . $entry->id; # redirect does not need a return
};

get '/update/:id[Int]' => needs login => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    var $_ => $entry->$_ foreach qw< title summary content >;
    template 'create_update', { post_to => uri_for "/update/$id" };
};

post '/update/:id[Int]' => needs login => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    if( !$entry ) {
        status 'not_found';
        return "Attempt to update non-existent entry $id";
    }

    my $params = body_parameters();
    var $_ => $params->{ $_ } foreach qw< title summary content >;
    my @missing = grep { $params->{$_} eq '' } qw< title summary content >;
    if( @missing ) {
        var missing => join ",", @missing;
        warning "Missing parameters: " . var 'missing';
        forward "/update/$id", {}, { method => 'GET' };
    }

    try {
        $entry->update( $params->as_hashref );
    }
    catch( $e ) {
        error "Database error: $e";
        var error_message => 'A database error occurred; your entry could not be updated',
        forward "/update/$id", {}, { method => 'GET' };
    }

    debug 'Updated entry ' . $entry->id . ' for "' . $entry->title . '"';
    redirect uri_for "/entry/" . $entry->id; # redirect does not need a return
};

get '/delete/:id[Int]' => needs login => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    template 'delete', { entry => $entry };
};

post '/delete/:id[Int]' => needs login => sub {
    my $id = route_parameters->get('id');
    my $entry = resultset( 'Entry' )->find( $id );
    if( !$entry ) {
        status 'not_found';
        return "Attempt to delete non-existent entry $id";
    }

    # Always default to not destroying data
    my $delete_it = body_parameters->get('delete_it') // 0;

    if( $delete_it ) {
        $entry->delete;
        redirect uri_for "/";
    } else {
        # Display our entry again
        redirect uri_for "/entry/$id";
    }
};

get '/login' => sub {
    template 'login' => { return_url => params->{ return_url } };
};

post '/login' => sub {
    my $username = body_parameters->get('username');
    my $password = body_parameters->get('password');
    my $return_url = body_parameters->get('return_url');

    my $user = resultset( 'User' )->find({ username => $username });
    if ( $user and verify_password( $password, $user->password) ) {
        app->change_session_id;
        session user => $username;
        info "$username successfully logged in";
        return redirect $return_url || '/';
    }
    else {
        warning "Failed login attempt for $username";
        template 'login' => { login_error => 1, return_url => $return_url };
    }
};

get '/logout' => sub {
    app->destroy_session;
    redirect uri_for "/";
};

true;
cpanm Test::WWW::Mechanize::PSGI
requires "Test::WWW::Mechanize::PSGI" => "0";
mkdir t/db
cp db/dlblog.db t/db/test.db
logger: "console"
log: "warning"
show_stacktrace: 0
no_server_tokens: 1

plugins:
  DBIx::Class:
    default:
      dsn: "dbi:SQLite:dbname=t/db/test.db"
      schema_class: "DLBlog::Schema"
      dbi_params:
        RaiseError: 1
        AutoCommit: 1
  CryptPassphrase:
    encoder:
      module: Argon2
      parallelism: 2
DANCER_ENVIRONMENT=test prove -lv
use strict;
use warnings;
use Test::More;
use Test::WWW::Mechanize::PSGI;
use DLBlog;
my $mech = Test::WWW::Mechanize::PSGI->new(
    app => DLBlog->to_app,
);

$mech->get_ok('/create', 'Got /create while not logged in');
$mech->content_contains('Password', '...and was presented with a login page');
$mech->submit_form_ok({
    fields => {
        username => 'admin',
        password => 'foobar',
    }}, '...which we gave invalid credentials');
$mech->content_contains('Invalid username or password', '...and gave us an appropriate error');
$mech->submit_form_ok({
    fields => {
        username => 'admin',
        password => 'test',
    }}, '...so we give it real credentials');
$mech->content_contains('form', '...and get something that looks like the create form' );
$mech->content_contains('Content', 'Confirmed this is the create form');

done_testing;
my $mech = Test::WWW::Mechanize::PSGI->new(
    app => DLBlog->to_app,
);
$mech->get_ok('/create', 'Got /create while not logged in');
$mech->content_contains('Password', '...and was presented with a login page');
$mech->submit_form_ok({
    fields => {
        username => 'admin',
        password => 'foobar',
    }}, '...which we gave invalid credentials');
$mech->content_contains('Invalid username or password', '...and gave us an appropriate error');
$mech->submit_form_ok({
    fields => {
        username => 'admin',
        password => 'test',
    }}, '...so we give it real credentials');
$mech->content_contains('form', '...and get something that looks like the create form' );
$mech->content_contains('Content', 'Confirmed this is the create form');
done_testing;
DANCER_ENVIRONMENT=test prove -lv t/003_login.t
t/003_login.t ..
ok 1 - Got /create while not logged in
ok 2 - ...and was presented with a login page
[DLBlog:2287783] warning @2025-02-06 22:34:25> Failed login attempt for admin in /path/to/DLBlog/lib/DLBlog.pm l. 134
ok 3 - ...which we gave invalid credentials
ok 4 - ...and gave us an appropriate error
ok 5 - ...so we give it real credentials
ok 6 - ...and get something that looks like the create form
ok 7 - Confirmed this is the create form
1..7
ok
All tests successful.
Files=1, Tests=7,  1 wallclock secs ( 0.02 usr  0.00 sys +  0.92 cusr  0.10 csys =  1.04 CPU)
Result: PASS
use strict;
use warnings;
use Test::More;
use Test::WWW::Mechanize::PSGI;

use DLBlog;
my $mech = Test::WWW::Mechanize::PSGI->new(
    app => DLBlog->to_app,
);

subtest 'Landing page' => sub {
    $mech->get_ok('/', 'Got landing page');
    $mech->title_is('Danceyland Blog', '...for our blog');
    $mech->content_contains('Test Blog Post','...and it has a test post');
};

subtest 'Login' => sub {
    $mech->get_ok('/login', 'Visit login page to make some changes');
    $mech->submit_form_ok({
        fields => {
            username => 'admin',
            password => 'test',
        }}, '...so we give it a user');
};

subtest 'Create' => sub {
    $mech->get_ok('/create', 'Write a new blog post');
    $mech->submit_form_ok({
        fields => {
            title => 'Another Test Post',
            summary => 'Writing a blog post can be done by tests too',
            content => 'You can create blog entries programmatically with Perl!',
        }}, '...then write another post');
    $mech->base_like( qr</entry/\d+$>, '...and get redirected to the new entry' );
};

my $entry_id;
subtest 'Update' => sub {
    ($entry_id) = $mech->uri =~ m</(\d+)$>;
    $mech->get_ok("/update/$entry_id", 'Navigating to the update page for this post');
    $mech->submit_form_ok({
        fields => {
            title => 'Yet ANOTHER Test Post',
        }}, '...then update yet another post');
    $mech->base_like( qr</entry/${entry_id}$>, '...and get redirected to the entry page' );
    $mech->has_tag('h1','Yet ANOTHER Test Post', '...and it has the updated title');
};

subtest 'Delete' => sub {
    $mech->get_ok("/delete/$entry_id", "Go delete page for new entry");
    $mech->submit_form_ok({
        fields => {
            delete_it => 'yes',
        }}, '...then delete it!');
    $mech->get_ok("/entry/$entry_id", '...then try to navigate to the entry');
    $mech->content_contains('Invalid entry','...and see the post is no longer there');
};

done_testing;
DANCER_ENVIRONMENT=test prove -lv t/004_blog.t
t/004_blog.t ..
# Subtest: Landing page
    ok 1 - Got landing page
    ok 2 - ...for our blog
    ok 3 - ...and it has a test post
    1..3
ok 1 - Landing page
# Subtest: Login
    ok 1 - Visit login page to make some changes
    ok 2 - ...so we give it a user
    1..2
ok 2 - Login
# Subtest: Create
    ok 1 - Write a new blog post
    ok 2 - ...then write another post
    ok 3 - ...and get redirected to the new entry
    1..3
ok 3 - Create
# Subtest: Update
    ok 1 - Navigating to the update page for this post
    ok 2 - ...then update yet another post
    ok 3 - ...and get redirected to the entry page
    ok 4 - ...and it has the updated title
    1..4
ok 4 - Update
# Subtest: Delete
    ok 1 - Go delete page for new entry
    ok 2 - ...then delete it!
    ok 3 - ...then try to navigate to the entry
    ok 4 - ...and see the post is no longer there
    1..4
ok 5 - Delete
1..5
ok
All tests successful.
Files=1, Tests=5,  1 wallclock secs ( 0.01 usr  0.01 sys +  0.77 cusr  0.10 csys =  0.89 CPU)
Result: PASS
# configuration file for production environment
behind_proxy: 1

# only log info, warning and error messsages
log: "info"

# log message to a file in logs/
logger: "file"

# hide errors
show_stacktrace: 0

# disable server tokens in production environments
no_server_tokens: 1

# Plugin configuration
plugins:
  DBIx::Class:
    default:
      dsn: "dbi:SQLite:dbname=db/dlblog.db"
      schema_class: "DLBlog::Schema"
      dbi_params:
        RaiseError: 1
        AutoCommit: 1
  CryptPassphrase:
    encoder:
      module: Argon2
      parallelism: 2
cpanm --installdeps . --with-test --with-all-features
DANCER_ENVIRONMENT=test prove -l
./t/001_base.t ......... ok
./t/002_index_route.t .. ok
./t/003_login.t ........ 1/? [DLBlog:2291513] warning @2025-02-06 22:59:09> Failed login attempt for admin in /path/to/DLBlog/lib/DLBlog.pm l. 134
./t/003_login.t ........ ok
./t/004_blog.t .........
# Subtest: Landing page
./t/004_blog.t ......... 1/? # Subtest: Login
./t/004_blog.t ......... 2/? # Subtest: Create
# Subtest: Update
# Subtest: Delete
./t/004_blog.t ......... ok
All tests successful.
Files=4, Tests=15,  3 wallclock secs ( 0.02 usr  0.00 sys +  2.30 cusr  0.32 csys =  2.64 CPU)
Result: PASS
cpanm Starman Server::Starter
requires "Starman";
requires "Server::Starter";
sudo start_server \
    --daemonize \
    --dir=/path/to/DLBlog \
    --port=5000 \
    --log-file=/var/log/dlblog.log \
    --pid-file=/var/run/dlblog.pid \
    --status-file=/var/run/dlblog.status \
    -- plackup -s Starman--user www-data --group www-data -E production \
    bin/app.psgi
start_server --restart --pid-file=/var/run/dlblog.pid --status-file=/var/run/dlblog.status
start_server --stop --pid-file=/var/run/dlblog.pid
server {
    listen 80;
    server_name example.com;

    location / {
        proxy_pass http://127.0.0.1:5000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

Dancer2...Tutorial(3)

💖 Dancer2::Manual::Tutorial(3) — the girlies' guide to getting you dancing 💖

✨ NAME ✨

🌸 VERSION 🌸

🦋 Dancer2 Tutorial 🦋

🎀 Introduction — the Danceyland Blog 🎀

⭐ What You'll Learn ⭐

🌈 Prerequisites 🌈

🧚 Setting Up Your Environment 🧚

💜 Installing Dancer2

🍓 Creating Your First App

🦄 Understanding Directory Structure 🦄

🔥 Using Plackup for Development 🔥

💅 Configuring Our Application 💅

🌟 CRUD Routes 🌟

🌸 What Routes are Needed? 🌸

✨ Add an Entry (Create) ✨

💜 Display an Entry (Read) 💜

🦋 Update an Entry (Update) 🦋

🎀 Delete an Entry (Delete) 🎀

⭐ Displaying the Entry List ⭐

🌈 Putting it all Together 🌈

🌸 Setting Up Views 🌸

🧚 Layout 🧚

🎀 Templates 🎀

🍓 The Index Route ("/")

🦋 The View Entry Route "/entry/:id"

💜 The Create Entry Routes "/create"

💅 The Update Entry Routes ("/update/:id")

🌸 The Delete Routes

⭐ Reviewing our Application Code ⭐

🌈 Adding Utility to our Views 🌈

🧚 Adding a Menu to our Layout

🌈 The Danceyland Database 🌈

🎀 Setting Up the Database 🎀

🧚 Using Dancer2::Plugin::DBIx::Class 🧚

💜 Generating Schema Classes 💜

💖 Implementing the Danceyland Blog 💖

🔍 Performing Queries 🔍

🔁 Redisplaying the Create Form 🔁

🎀 Updating the create form to show previous values 🎀

💬 Displaying messages 💬

🌈 Displaying Blog Data 🌈

💅 Updating a blog entry 💅

Updating the create form's post_to

🦋 Deleting a Blog Entry 🦋

🌸 Implementation Recap 🌸

🔐 Authentication 🔐

🌸 Sessions 🌸

✨ Setting Up a Session Engine ✨

🎀 Storing and Retrieving Session Data 🎀

🌈 Storing application users 🌈

🦋 Password management with Dancer2::Plugin::CryptPassphrase 🦋

👑 Dancer2::Plugin::Auth::Tiny 👑

💖 Implementing Login 💖

🌸 Implementing Logout 🌸

🔒 Securing Routes 🔒

✨ Recap ✨

🎀 Finishing Touches 🎀

💅 Adding some style 💅

🧪 Testing Your Application 🧪

🦋 Using Test::WWW::Mechanize::PSGI 🦋

🔥 Login Tests 🔥

🦋 Blog Tests 🦋

🚀 DEPLOYMENT 🚀

🎀 Creating Production Configuration 🎀

📦 Installing the Danceyland Blog 📦

🧚 Deploying with a PSGI Server 🧚

🌈 Configuring Reverse Proxy with NGINX 🌈

👑 WHAT YOU'VE BUILT 👑

🦋 WHERE TO GO NEXT 🦋

✨ AUTHOR ✨

📜 COPYRIGHT AND LICENSE 📜

Updating the create form's `post_to`