chore: migrate genesis backend into repository

move frontend files to src
fix urls in index.html

Author: simonwep

.env.example

@@ -1,4 +1,7 @@
-# Frontend configuration for during development
+# ===============================================
+# Frontend configuration 
+# ===============================================
+
 # Backend host, usually /api if hosted locally and used via proxy
 # If omitted and OCULAR_HYBRID_MODE is not set to true, authentication will be required to use the app
 OCULAR_GENESIS_HOST=/api
@@ -10,3 +13,59 @@ OCULAR_HYBRID_MODE=
 # Optional, pre-filled login credentials for local testing
 OCULAR_TEST_USERNAME=admin
 OCULAR_TEST_PASSWORD=hgEiPCZP
+
+# ===============================================
+# Backend configuration
+# ===============================================
+
+# Database location
+GENESIS_DB_PATH=.data
+
+# JWT secret known only to your token generator
+GENESIS_JWT_SECRET=84d62c48dd30ca7caf6561252c5bd919
+
+# JWT expiration in minutes
+GENESIS_JWT_TOKEN_EXPIRATION=120000
+
+# If the cookie should be allowed to be sent over http
+# Dangerous, it's best to run it behind a reverse proxy with https
+GENESIS_JWT_COOKIE_ALLOW_HTTP=true
+
+# Gin mode, either test, release or debug
+GENESIS_GIN_MODE=test
+
+# Zap logger, either production or development
+GENESIS_LOG_MODE=development
+
+# Port to listen on
+GENESIS_PORT=8080
+
+# Base url to listen for requests
+GENESIS_BASE_URL=/
+
+# Users to be created on start up.
+# Use ! as suffix for the username to indicate that this user should be created as an admin.
+# Admins can add, remove and edit users.
+GENESIS_CREATE_USERS=admin!:hgEiPCZP
+
+# Allowed username pattern
+GENESIS_USERNAME_PATTERN=^[\w]{0,32}$
+
+# Allowed key pattern
+GENESIS_KEY_PATTERN=^[\w]{0,32}$
+
+# Maximum size of each key in kilobytes
+GENESIS_DATA_MAX_SIZE=512
+
+# Maximum amount of datasets per user
+GENESIS_KEYS_PER_USER=3
+
+# Maximum login attempts before temporary lockout for a user.
+# They reset after a successful login and are not persistent across restarts.
+# Setting it to 0 disables this feature.
+GENESIS_LOGIN_MAX_ATTEMPTS=5
+
+# Durations for temporary lockouts after failed login attempts, capped at the last value.
+# This is reset after a successful login for each individual user.
+# Leaving this empty disables temporary lockouts.
+GENESIS_LOGIN_LOCKOUT_DURATIONS=3s,15s,1m,5m,10m,15m

.env.genesis

@@ -19,7 +19,7 @@ Make sure you have the following installed:
 
 - [Node.js](https://nodejs.org/en/) (LTS version)
 - [pnpm](https://pnpm.io/) (for package management)
-- [Docker](https://www.docker.com/) (leave out if you want to work only on the frontend)
+- [GoLang](https://golang.org/) (leave out if you want to work only on the frontend)
 
 After you've installed the required software, follow these steps:
 

.github/CONTRIBUTING.md

@@ -1,7 +1,6 @@
 name: Test
 
 on:
-  pull_request:
   push:
     tags-ignore:
       - '**'
@@ -10,11 +9,10 @@ on:
 
 env:
   HUSKY: 0
-  GENESIS_VERSION: v1.6.1
 
 jobs:
-  test:
-    name: Run unit, lint and e2e tests
+  test_ocular:
+    name: Run ocular tests
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
@@ -23,6 +21,11 @@ jobs:
       - name: Setup repository
         uses: ./.github/workflows/actions/setup-repository
 
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: 1.26
+
       - name: Setup ESLint cache
         uses: actions/cache@v5
         with:
@@ -41,11 +44,16 @@ jobs:
           OCULAR_GENESIS_HOST: /api
           OCULAR_HYBRID_MODE: true
 
+      - name: Prepare .env
+        run: cp .env.example .env
+
+      - name: Install go dependencies
+        run: go -C genesis mod download
+
       - name: Start genesis and ocular
         run: |
-          docker pull ghcr.io/simonwep/genesis:latest
-          docker run -p 8080:8080 -v "./.data:/app/.data" --env-file .env.genesis ghcr.io/simonwep/genesis:${{ env.GENESIS_VERSION }} start &
-          pnpm vite preview &
+          pnpm dev:backend >genesis.log 2>&1 &
+          pnpm vite preview >ocular.log 2>&1 &
 
       - name: Wait for genesis to be healthy
         uses: ./.github/workflows/actions/wait-for-health-check
@@ -71,3 +79,32 @@ jobs:
           name: test-results
           path: test-results/
           retention-days: 7
+
+      - name: Upload service logs
+        uses: actions/upload-artifact@v7
+        if: ${{ failure() }}
+        with:
+          name: service-logs
+          path: "*.log"
+          retention-days: 7
+
+  test_genesis:
+    name: Run genesis tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: 1.26
+
+      - name: Install dependencies
+        run: go -C genesis mod download
+
+      - name: Build
+        run: go -C genesis build -v ./...
+
+      - name: Test
+        run: go -C genesis test -v ./...

.github/workflows/test.yml

@@ -1,4 +1,18 @@
-FROM ghcr.io/simonwep/genesis:v1.6.1 AS genesis
+FROM --platform=$BUILDPLATFORM golang:1.26-alpine AS genesis
+
+ARG TARGETOS
+ARG TARGETARCH
+
+WORKDIR /app
+COPY genesis/go.mod genesis/go.sum ./genesis/
+
+RUN cd genesis && \
+    go mod download
+
+COPY genesis ./genesis
+
+RUN cd genesis && \
+    GOOS=$TARGETOS GOARCH=$TARGETARCH go build -o genesis
 
 FROM --platform=$BUILDPLATFORM node:24-alpine AS frontend
 
@@ -41,7 +55,7 @@ ENV GENESIS_KEYS_PER_USER='2'
 ENV GENESIS_LOGIN_MAX_ATTEMPTS='5'
 ENV GENESIS_LOGIN_LOCKOUT_DURATIONS='1m,5m,15m,30m,1h'
 
-COPY --from=genesis /app/genesis /usr/local/bin/genesis
+COPY --from=genesis /app/genesis/genesis /usr/local/bin/genesis
 COPY --from=frontend /app/dist /usr/share/caddy
 
 COPY ./docker/Caddyfile /etc/caddy/Caddyfile

docker/Dockerfile

@@ -0,0 +1,13 @@
+GENESIS_DB_PATH=.data
+GENESIS_JWT_SECRET=iD5kvlPDwvrlKZLecoV1lhGN9Em8mDFZ
+GENESIS_JWT_TOKEN_EXPIRATION=120960
+GENESIS_GIN_MODE=test
+GENESIS_LOG_MODE=development
+GENESIS_PORT=8080
+GENESIS_CREATE_USERS=foo:hgEiPCZP,baz:8d7f6g5h,bar!:EczUR8dn
+GENESIS_USERNAME_PATTERN=^[\w]{0,32}$
+GENESIS_KEY_PATTERN=^[\w]{0,32}$
+GENESIS_DATA_MAX_SIZE=1
+GENESIS_KEYS_PER_USER=3
+GENESIS_LOGIN_MAX_ATTEMPTS=5
+GENESIS_LOGIN_LOCKOUT_DURATIONS=2s,5s,10s

genesis/.env.test

@@ -0,0 +1,20 @@
+package commands
+
+import (
+	"github.com/simonwep/genesis/core"
+	"github.com/simonwep/genesis/routes"
+	"github.com/urfave/cli/v2"
+)
+
+func Start(*cli.Context) error {
+	router := routes.SetupRoutes()
+	core.InitializeUsers()
+
+	if err := router.SetTrustedProxies(nil); err != nil {
+		return err
+	} else if err = router.Run("0.0.0.0:" + core.Config.AppPort); err != nil {
+		return err
+	}
+
+	return nil
+}

genesis/commands/app.go

@@ -0,0 +1,67 @@
+package commands
+
+import (
+	"errors"
+	"fmt"
+	"strings"
+
+	"github.com/simonwep/genesis/core"
+	"github.com/urfave/cli/v2"
+)
+
+func ListUsers(_ *cli.Context) error {
+	if users, err := core.GetAllUsers(); err != nil {
+		return err
+	} else {
+
+		// Print users
+		for _, user := range users {
+			fmt.Printf("Name: %v, Admin: %v\n", user.Name, user.Admin)
+		}
+	}
+
+	return nil
+}
+
+func RemoveUser(ctx *cli.Context) error {
+	return core.DeleteUser(ctx.Args().Get(0))
+}
+
+func AddUser(ctx *cli.Context) error {
+	username, password := ctx.Args().Get(0), ctx.Args().Get(1)
+	admin := strings.HasSuffix(username, "!")
+
+	err := core.CreateUser(core.User{
+		Name:     strings.TrimSuffix(username, "!"),
+		Admin:    admin,
+		Password: password,
+	})
+
+	if errors.Is(err, core.ErrUserAlreadyExists) {
+		fmt.Println("User already exists")
+		return nil
+	}
+
+	return err
+}
+
+func UpdateUser(ctx *cli.Context) error {
+	username := ctx.Args().Get(0)
+	newPassword := ctx.String("password")
+
+	if newPassword == "" {
+		fmt.Println("No password provided")
+		return nil
+	}
+
+	err := core.UpdateUser(username, core.PartialUser{
+		Password: &newPassword,
+	})
+
+	if errors.Is(err, core.ErrUserNotFound) {
+		fmt.Println("User not found")
+		return nil
+	}
+
+	return err
+}

genesis/commands/user.go

@@ -0,0 +1,48 @@
+package core
+
+import (
+	"fmt"
+	"time"
+
+	"github.com/golang-jwt/jwt/v5"
+	"github.com/google/uuid"
+)
+
+type JWTClaim struct {
+	User string `json:"user"`
+	jwt.RegisteredClaims
+}
+
+func CreateAuthToken(user *User) (string, error) {
+	return jwt.NewWithClaims(jwt.SigningMethodHS256, JWTClaim{
+		User: user.Name,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(Config.JWTExpiration)),
+			ID:        uuid.NewString(),
+		},
+	}).SignedString(Config.JWTSecret)
+}
+
+func ParseAuthToken(token string) (*JWTClaim, error) {
+	var claims JWTClaim
+
+	_, err := jwt.ParseWithClaims(token, &claims,
+		func(t *jwt.Token) (interface{}, error) {
+			if _, ok := t.Method.(*jwt.SigningMethodHMAC); !ok {
+				return nil, fmt.Errorf("unexpected signing method: %v", t.Header["alg"])
+			}
+			return Config.JWTSecret, nil
+		},
+		jwt.WithValidMethods([]string{"HS256"}),
+	)
+
+	if len(claims.ID) != 0 {
+		blacklisted, err := IsTokenBlacklisted(claims.ID)
+
+		if blacklisted || err != nil {
+			return nil, err
+		}
+	}
+
+	return &claims, err
+}