fix examples auth and smoke paths

Author: cssbruno

examples/README.md

@@ -18,7 +18,9 @@ is required by project-level compiler commands.
 | SSR and guards | `examples/auth-guard/` | `cd examples/auth-guard && make check && make routes && make build` |
 | One generated binary | `examples/embed/` | `go run ./cmd/gowdk build --out /tmp/gowdk-embed-build --app /tmp/gowdk-embed-app --bin /tmp/gowdk-embed-site examples/embed/site.page.gwdk` |
 | Contracts and realtime | `examples/contracts/` | `go run ./cmd/gowdk build --config examples/contracts/gowdk.config.go --out /tmp/gowdk-contracts-build --app /tmp/gowdk-contracts-app --bin /tmp/gowdk-contracts-site examples/contracts/patients.page.gwdk` |
-| CSS and Tailwind | `examples/css/`, `examples/tailwind/` | `go run ./cmd/gowdk build --config examples/css/gowdk.config.go --out /tmp/gowdk-css-build examples/css/styled.page.gwdk` |
+| CSS | `examples/css/` | `go run ./cmd/gowdk build --config examples/css/gowdk.config.go --out /tmp/gowdk-css-build examples/css/styled.page.gwdk` |
+| Tailwind | `examples/tailwind/` | `go run ./cmd/gowdk build --config examples/tailwind/gowdk.config.go --out /tmp/gowdk-tailwind-build examples/tailwind/site.page.gwdk` |
+| SEO | `examples/seo/` | `go run ./cmd/gowdk build --config examples/seo/gowdk.config.go --out /tmp/gowdk-seo-build examples/seo/*.gwdk` |
 | Component assets and WASM islands | `examples/components/` | `go run ./cmd/gowdk build --out /tmp/gowdk-wasm-island examples/components/wasm/*.gwdk` |
 | Full-stack vertical slice | `examples/flagship/` | `cd examples/flagship && make check && make routes && make build` |
 

examples/flagship/Makefile

@@ -1,25 +1,24 @@
-ROOT := ../..
-CONFIG := examples/flagship/gowdk.config.go
-APP_DIR := examples/flagship/.gowdk/app
+CONFIG := gowdk.config.go
+APP_DIR := .gowdk/app
 HOOK_FILE := $(APP_DIR)/gowdkapp/flagship_hooks.go
 
 .PHONY: check routes build serve clean
 
 check:
-	cd $(ROOT) && go run ./cmd/gowdk check --config $(CONFIG)
+	go run ../../cmd/gowdk check --config $(CONFIG)
 
 routes:
-	cd $(ROOT) && go run ./cmd/gowdk routes --config $(CONFIG)
+	go run ../../cmd/gowdk routes --config $(CONFIG)
 
 $(HOOK_FILE): apphooks/flagship_hooks.go.txt
-	mkdir -p $(ROOT)/$(APP_DIR)/gowdkapp
-	cp apphooks/flagship_hooks.go.txt $(ROOT)/$(HOOK_FILE)
+	mkdir -p $(APP_DIR)/gowdkapp
+	cp apphooks/flagship_hooks.go.txt $(HOOK_FILE)
 
 build: $(HOOK_FILE)
-	cd $(ROOT) && go run ./cmd/gowdk build --config $(CONFIG) --target flagship
+	go run ../../cmd/gowdk build --config $(CONFIG) --target flagship
 
 serve: build
-	GOWDK_CSRF_SECRET=development-flagship-csrf-secret-32b GOWDK_ADDR=127.0.0.1:8092 bin/flagship
+	GOWDK_CSRF_SECRET=development-flagship-csrf-secret-32b GOWDK_FLAGSHIP_SECRET=development-flagship-session-secret-32b GOWDK_ADDR=127.0.0.1:8092 bin/flagship
 
 clean:
 	rm -rf .gowdk bin dist

examples/flagship/README.md

@@ -11,7 +11,10 @@ Run from this directory:
 make check
 make routes
 make build
-GOWDK_CSRF_SECRET=development-flagship-csrf-secret-32b GOWDK_ADDR=127.0.0.1:8092 bin/flagship
+GOWDK_CSRF_SECRET=development-flagship-csrf-secret-32b \
+  GOWDK_FLAGSHIP_SECRET=development-flagship-session-secret-32b \
+  GOWDK_ADDR=127.0.0.1:8092 \
+  bin/flagship
 ```
 
 Expected build outputs:
@@ -68,7 +71,8 @@ The main generated routes are:
 
 Use `demo@example.com` and `demo-password`. Override them with
 `GOWDK_FLAGSHIP_EMAIL`, `GOWDK_FLAGSHIP_PASSWORD`, and
-`GOWDK_FLAGSHIP_SECRET`.
+`GOWDK_FLAGSHIP_SECRET`. `GOWDK_FLAGSHIP_SECRET` is required and signs the demo
+session cookie.
 
 ## Current Limitations
 

examples/flagship/apphooks/flagship_hooks.go.txt

@@ -3,9 +3,9 @@ package gowdkapp
 import (
 	"time"
 
-	gowdkratelimit "github.com/cssbruno/gowdk/addons/ratelimit"
 	flagship "github.com/cssbruno/gowdk/examples/flagship/src/app"
 	gowdkguard "github.com/cssbruno/gowdk/runtime/guard"
+	gowdkratelimit "github.com/cssbruno/gowdk/runtime/ratelimit"
 )
 
 func init() {

examples/flagship/gowdk.config.go

@@ -14,18 +14,18 @@ var Config = gowdk.Config{
 		Include: []string{"src/**/*.gwdk"},
 	},
 	Build: gowdk.BuildConfig{
-		Output: "examples/flagship/dist",
+		Output: "dist",
 		Targets: []gowdk.BuildTargetConfig{
 			{
 				Name:   "flagship",
-				Output: "examples/flagship/dist",
-				App:    "examples/flagship/.gowdk/app",
-				Binary: "examples/flagship/bin/flagship",
+				Output: "dist",
+				App:    ".gowdk/app",
+				Binary: "bin/flagship",
 			},
 		},
 	},
 	CSS: gowdk.CSSConfig{
-		Include: []string{"examples/flagship/styles/**/*.css"},
+		Include: []string{"styles/*.css"},
 		Output: gowdk.CSSOutputConfig{
 			Dir:        "assets/gowdk",
 			HrefPrefix: "/assets/gowdk",

examples/flagship/src/app/app.go

@@ -24,6 +24,9 @@ import (
 const sessionCookie = "gowdk_flagship_session"
 
 func Login(_ context.Context, values form.Values) (response.Response, error) {
+	if len(sessionSecret()) == 0 {
+		return response.RedirectTo("/?login=failed"), nil
+	}
 	email := strings.TrimSpace(values.First("email"))
 	password := values.First("password")
 	if !constantEqual(email, env("GOWDK_FLAGSHIP_EMAIL", "demo@example.com")) ||
@@ -127,6 +130,9 @@ var sessions = struct {
 }{Values: map[string]session{}}
 
 func currentSession(request *http.Request) (session, bool) {
+	if len(sessionSecret()) == 0 {
+		return session{}, false
+	}
 	if request == nil {
 		return session{}, false
 	}
@@ -159,11 +165,15 @@ func sign(value string) string {
 }
 
 func signature(value string) string {
-	mac := hmac.New(sha256.New, []byte(env("GOWDK_FLAGSHIP_SECRET", "development-flagship-secret-change-me")))
+	mac := hmac.New(sha256.New, sessionSecret())
 	_, _ = mac.Write([]byte(value))
 	return base64.RawURLEncoding.EncodeToString(mac.Sum(nil))
 }
 
+func sessionSecret() []byte {
+	return []byte(strings.TrimSpace(os.Getenv("GOWDK_FLAGSHIP_SECRET")))
+}
+
 func sessionDuration() time.Duration {
 	return 12 * time.Hour
 }

examples/flagship/src/app/home.page.gwdk

@@ -56,7 +56,7 @@ view {
         <h2>Session action</h2>
         <form class="stack-form" g:post={Login}>
           <label>Email <input name="email" type="email" required value="demo@example.com" /></label>
-          <label>Password <input name="password" type="password" required minlength="8" value="demo-password" /></label>
+          <label>Password <input name="password" type="password" required minlength="8" /></label>
           <button>Sign in</button>
         </form>
       </div>

examples/i18n/README.md

@@ -4,8 +4,8 @@ This example shows the first localization slice:
 
 - `gowdk.config.go` declares `Config.I18N` locales.
 - `messages.go` keeps typed message keys and catalogs in normal Go.
-- `messages_test.go` checks the typed message references against each locale
-  catalog, which is the current CI-friendly extraction/completeness path.
+- `messages_test.go` checks the required typed message keys against each locale
+  catalog without hand-maintained source line metadata.
 - `home.page.gwdk` calls a Go build helper that reads
   `gowdk.BuildParams.LocaleCode()`.
 

examples/i18n/messages.go

@@ -12,9 +12,9 @@ const (
 	messageIntro messageKey = "intro"
 )
 
-var homeMessageRefs = []gowdki18n.MessageReference[messageKey]{
-	gowdki18n.Ref(messageTitle, "examples/i18n/home.page.gwdk", 14, 9),
-	gowdki18n.Ref(messageIntro, "examples/i18n/home.page.gwdk", 15, 8),
+var homeRequiredMessages = []gowdki18n.MessageReference[messageKey]{
+	gowdki18n.Key(messageTitle),
+	gowdki18n.Key(messageIntro),
 }
 
 type HomeCopy struct {

examples/i18n/messages_test.go

@@ -3,7 +3,7 @@ package i18nexample
 import "testing"
 
 func TestHomeMessagesComplete(t *testing.T) {
-	if report := homeMessages.Check(homeMessageRefs); !report.OK() {
+	if report := homeMessages.Check(homeRequiredMessages); !report.OK() {
 		t.Fatalf("localized message catalogs are incomplete:\n%s", report.Error())
 	}
 }