config.ru

require 'sidekiq'

Sidekiq.configure_client do |config|
  config.redis = {
    url: ENV.fetch('REDIS_URL','redis://localhost:6379'),
    ssl_params: { verify_mode: OpenSSL::SSL::VERIFY_NONE },
    size: 1
  }
end

raise "USERNAME or PASSWORD environment variables missing" if !ENV["USERNAME"] || !ENV["PASSWORD"]

require 'sidekiq/web'
require 'securerandom';

File.open(".session.key", "w") {|f| f.write(SecureRandom.hex(32)) }
use Rack::Session::Cookie, secret: File.read(".session.key"), same_site: true, max_age: 86400

map '/' do
  use Rack::Auth::Basic, "Protected Area" do |username, password|
    # Protect against timing attacks: (https://codahale.com/a-lesson-in-timing-attacks/)
    # - Use & (do not use &&) so that it doesn't short circuit.
    # - Use digests to stop length information leaking
    Rack::Utils.secure_compare(::Digest::SHA256.hexdigest(username), ::Digest::SHA256.hexdigest(ENV["USERNAME"])) &
      Rack::Utils.secure_compare(::Digest::SHA256.hexdigest(password), ::Digest::SHA256.hexdigest(ENV["PASSWORD"]))
  end

  run Sidekiq::Web
end