Finally get login working.

handlers/account.go

@@ -2,6 +2,7 @@ package handlers
 
 import (
 	"html/template"
+	"log"
 	"net/http"
 	"synlotto-website/helpers"
 	"synlotto-website/models"
@@ -26,7 +27,11 @@ func Login(w http.ResponseWriter, r *http.Request) {
 		context := helpers.TemplateContext(w, r)
 		context["csrfField"] = csrf.TemplateField(r)
 
-		tmpl.ExecuteTemplate(w, "layout", context)
+		err := tmpl.ExecuteTemplate(w, "layout", context)
+		if err != nil {
+			log.Println("❌ Template render error:", err)
+			http.Error(w, "Error rendering login page", http.StatusInternalServerError)
+		}
 		return
 	}
 
@@ -40,34 +45,55 @@ func Login(w http.ResponseWriter, r *http.Request) {
 	}
 
 	session, _ := helpers.GetSession(w, r)
-	session.Options.MaxAge = -1
-	session.Save(r, w)
 
-	remember := r.FormValue("remember") == "on"
-
-	newSession, _ := helpers.GetSession(w, r)
-	newSession.Values["user_id"] = user.Id
-	newSession.Values["last_activity"] = time.Now()
-
-	if remember {
-		newSession.Options.MaxAge = 60 * 60 * 24 * 30 // 30 days
-	} else {
-		newSession.Options.MaxAge = 0
+	for k := range session.Values {
+		delete(session.Values, k)
 	}
 
-	newSession.Save(r, w)
+	session.Values["user_id"] = user.Id
+	session.Values["last_activity"] = time.Now()
+
+	remember := r.FormValue("remember") == "on"
+	if remember {
+		session.Options.MaxAge = 60 * 60 * 24 * 30
+	} else {
+		session.Options.MaxAge = 0
+	}
+
+	err := session.Save(r, w)
+	if err != nil {
+		log.Println("❌ Failed to save session:", err)
+	} else {
+		log.Printf("✅ Login saved: user_id=%d, maxAge=%d", user.Id, session.Options.MaxAge)
+		for _, c := range r.Cookies() {
+			log.Printf("🍪 Cookie after login: %s = %s", c.Name, c.Value)
+		}
+	}
+
+	if user == nil || !helpers.CheckPasswordHash(user.PasswordHash, password) {
+		models.LogLoginAttempt(username, false)
+		http.Error(w, "Invalid credentials", http.StatusUnauthorized)
+		return
+	}
+	models.LogLoginAttempt(username, true)
 
 	http.Redirect(w, r, "/", http.StatusSeeOther)
 }
 
 func Logout(w http.ResponseWriter, r *http.Request) {
 	session, _ := helpers.GetSession(w, r)
-	session.Options.MaxAge = -1
-	session.Save(r, w)
 
-	newSession, _ := helpers.GetSession(w, r)
-	newSession.Values["flash"] = "You’ve been logged out"
-	newSession.Save(r, w)
+	for k := range session.Values {
+		delete(session.Values, k)
+	}
+
+	session.Values["flash"] = "You've been logged out."
+	session.Options.MaxAge = 5
+
+	err := session.Save(r, w)
+	if err != nil {
+		log.Println("❌ Logout session save failed:", err)
+	}
 
 	http.Redirect(w, r, "/login", http.StatusSeeOther)
 }