Covered in this tutorial:
net/http
package to build web applications
html/template
package to process HTML templatesregexp
package to validate user inputAssumed knowledge:
At present, you need to have a FreeBSD, Linux, OS X, or Windows machine to run Go.
We will use $
to represent the command prompt.
Install Go (see the Installation Instructions).
Make a new directory for this tutorial and cd to it:
$ mkdir gowiki $ cd gowiki
Create a file named wiki.go
, open it in your favorite editor, and
add the following lines:
package main import ( "fmt" "io/ioutil" )
We import the fmt
and ioutil
packages from the Go
standard library. Later, as we implement additional functionality, we will
add more packages to this import
declaration.
Let's start by defining the data structures. A wiki consists of a series of
interconnected pages, each of which has a title and a body (the page content).
Here, we define Page
as a struct with two fields representing
the title and body.
!srcextract.bin -src=part1.go -name=Page
The type []byte
means "a byte
slice".
(See Slices: usage and
internals for more on slices.)
The Body
element is a []byte
rather than
string
because that is the type expected by the io
libraries we will use, as you'll see below.
The Page
struct describes how page data will be stored in memory.
But what about persistent storage? We can address that by creating a
save
method on Page
:
!srcextract.bin -src=part1.go -name=save
This method's signature reads: "This is a method named save
that
takes as its receiver p
, a pointer to Page
. It takes
no parameters, and returns a value of type error
."
This method will save the Page
's Body
to a text
file. For simplicity, we will use the Title
as the file name.
The save
method returns an error
value because
that is the return type of WriteFile
(a standard library function
that writes a byte slice to a file). The save
method returns the
error value, to let the application handle it should anything go wrong while
writing the file. If all goes well, Page.save()
will return
nil
(the zero-value for pointers, interfaces, and some other
types).
The octal integer constant 0600
, passed as the third parameter to
WriteFile
, indicates that the file should be created with
read-write permissions for the current user only. (See the Unix man page
open(2)
for details.)
We will want to load pages, too:
!srcextract.bin -src=part1-noerror.go -name=loadPage
The function loadPage
constructs the file name from
Title
, reads the file's contents into a new
Page
, and returns a pointer to that new page
.
Functions can return multiple values. The standard library function
io.ReadFile
returns []byte
and error
.
In loadPage
, error isn't being handled yet; the "blank identifier"
represented by the underscore (_
) symbol is used to throw away the
error return value (in essence, assigning the value to nothing).
But what happens if ReadFile
encounters an error? For example,
the file might not exist. We should not ignore such errors. Let's modify the
function to return *Page
and error
.
!srcextract.bin -src=part1.go -name=loadPage
Callers of this function can now check the second parameter; if it is
nil
then it has successfully loaded a Page. If not, it will be an
error
that can be handled by the caller (see the
language specification for details).
At this point we have a simple data structure and the ability to save to and
load from a file. Let's write a main
function to test what we've
written:
!srcextract.bin -src=part1.go -name=main
After compiling and executing this code, a file named TestPage.txt
would be created, containing the contents of p1
. The file would
then be read into the struct p2
, and its Body
element
printed to the screen.
You can compile and run the program like this:
$ go build wiki.go $ ./wiki This is a sample page.
(If you're using Windows you must type "wiki
" without the
"./
" to run the program.)
Click here to view the code we've written so far.
net/http
package (an interlude)Here's a full working example of a simple web server:
!htmlify.bin < http-sample.go
The main
function begins with a call to
http.HandleFunc
, which tells the http
package to
handle all requests to the web root ("/"
) with
handler
.
It then calls http.ListenAndServe
, specifying that it should
listen on port 8080 on any interface (":8080"
). (Don't
worry about its second parameter, nil
, for now.)
This function will block until the program is terminated.
The function handler
is of the type http.HandlerFunc
.
It takes an http.ResponseWriter
and an http.Request
as
its arguments.
An http.ResponseWriter
value assembles the HTTP server's response; by writing
to it, we send data to the HTTP client.
An http.Request
is a data structure that represents the client
HTTP request. The string r.URL.Path
is the path component
of the request URL. The trailing [1:]
means
"create a sub-slice of Path
from the 1st character to the end."
This drops the leading "/" from the path name.
If you run this program and access the URL:
http://localhost:8080/monkeys
the program would present a page containing:
Hi there, I love monkeys!
net/http
to serve wiki pages
To use the net/http
package, it must be imported:
import ( "fmt" "net/http" "io/ioutil" )
Let's create a handler to view a wiki page:
!srcextract.bin -src=part2.go -name=lenPath !srcextract.bin -src=part2.go -name=viewHandler
First, this function extracts the page title from r.URL.Path
,
the path component of the request URL. The global constant
lenPath
is the length of the leading "/view/"
component of the request path.
The Path
is re-sliced with [lenPath:]
to drop the
first 6 characters of the string. This is because the path will invariably
begin with "/view/"
, which is not part of the page title.
The function then loads the page data, formats the page with a string of simple
HTML, and writes it to w
, the http.ResponseWriter
.
Again, note the use of _
to ignore the error
return value from loadPage
. This is done here for simplicity
and generally considered bad practice. We will attend to this later.
To use this handler, we create a main
function that
initializes http
using the viewHandler
to handle
any requests under the path /view/
.
!srcextract.bin -src=part2.go -name=main
Click here to view the code we've written so far.
Let's create some page data (as test.txt
), compile our code, and
try serving a wiki page.
Open test.txt
file in your editor, and save the string "Hello world" (without quotes)
in it.
$ go build wiki.go $ ./wiki
With this web server running, a visit to http://localhost:8080/view/test
should show a page titled "test" containing the words "Hello world".
A wiki is not a wiki without the ability to edit pages. Let's create two new
handlers: one named editHandler
to display an 'edit page' form,
and the other named saveHandler
to save the data entered via the
form.
First, we add them to main()
:
!srcextract.bin -src=final-noclosure.go -name=main
The function editHandler
loads the page
(or, if it doesn't exist, create an empty Page
struct),
and displays an HTML form.
!srcextract.bin -src=notemplate.go -name=editHandler
This function will work fine, but all that hard-coded HTML is ugly. Of course, there is a better way.
html/template
package
The html/template
package is part of the Go standard library.
We can use html/template
to keep the HTML in a separate file,
allowing us to change the layout of our edit page without modifying the
underlying Go code.
First, we must add html/template
to the list of imports:
import ( "http" "io/ioutil" "os" "html/template" )
Let's create a template file containing the HTML form.
Open a new file named edit.html
, and add the following lines:
!htmlify.bin < edit.html
Modify editHandler
to use the template, instead of the hard-coded
HTML:
!srcextract.bin -src=final-noerror.go -name=editHandler
The function template.ParseFiles
will read the contents of
edit.html
and return a *template.Template
.
The method t.Execute
executes the template, writing the
generated HTML to the http.ResponseWriter
.
The .Title
and .Body
dotted identifiers refer to
p.Title
and p.Body
.
Template directives are enclosed in double curly braces.
The printf "%s" .Body
instruction is a function call
that outputs .Body
as a string instead of a stream of bytes,
the same as a call to fmt.Printf
.
The |html
part of each directive pipes the value through the
html
formatter before outputting it, which escapes HTML
characters (such as replacing >
with >
),
preventing user data from corrupting the form HTML.
Now that we've removed the fmt.Fprintf
statement, we can remove
"fmt"
from the import
list.
While we're working with templates, let's create a template for our
viewHandler
called view.html
:
!htmlify.bin < view.html
Modify viewHandler
accordingly:
!srcextract.bin -src=final-noerror.go -name=viewHandler
Notice that we've used almost exactly the same templating code in both handlers. Let's remove this duplication by moving the templating code to its own function:
!srcextract.bin -src=final-template.go -name=viewHandler !srcextract.bin -src=final-template.go -name=editHandler !srcextract.bin -src=final-template.go -name=renderTemplate
The handlers are now shorter and simpler.
What if you visit
/view/APageThatDoesntExist
? The program will crash. This is
because it ignores the error return value from loadPage
. Instead,
if the requested Page doesn't exist, it should redirect the client to the edit
Page so the content may be created:
!srcextract.bin -src=final-noclosure.go -name=viewHandler
The http.Redirect
function adds an HTTP status code of
http.StatusFound
(302) and a Location
header to the HTTP response.
The function saveHandler
will handle the form submission.
!srcextract.bin -src=final-template.go -name=saveHandler
The page title (provided in the URL) and the form's only field,
Body
, are stored in a new Page
.
The save()
method is then called to write the data to a file,
and the client is redirected to the /view/
page.
The value returned by FormValue
is of type string
.
We must convert that value to []byte
before it will fit into
the Page
struct. We use []byte(body)
to perform
the conversion.
There are several places in our program where errors are being ignored. This is bad practice, not least because when an error does occur the program will crash. A better solution is to handle the errors and return an error message to the user. That way if something does go wrong, the server will continue to function and the user will be notified.
First, let's handle the errors in renderTemplate
:
!srcextract.bin -src=final-parsetemplate.go -name=renderTemplate
The http.Error
function sends a specified HTTP response code
(in this case "Internal Server Error") and error message.
Already the decision to put this in a separate function is paying off.
Now let's fix up saveHandler
:
!srcextract.bin -src=final-noclosure.go -name=saveHandler
Any errors that occur during p.save()
will be reported
to the user.
There is an inefficiency in this code: renderTemplate
calls
ParseFile
every time a page is rendered.
A better approach would be to call ParseFile
once for each
template at program initialization, and store the resultant
*Template
values in a data structure for later use.
First we create a global map named templates
in which to store
our *Template
values, keyed by string
(the template name):
!srcextract.bin -src=final.go -name=templates
Then we create an init
function, which will be called before
main
at program initialization. The function
template.Must
is a convenience wrapper that panics when passed a
non-nil error
value, and otherwise returns the
*Template
unaltered. A panic is appropriate here; if the templates
can't be loaded the only sensible thing to do is exit the program.
!srcextract.bin -src=final.go -name=init
A for
loop is used with a range
statement to iterate
over an array constant containing the names of the templates we want parsed.
If we were to add more templates to our program, we would add their names to
that array.
We then modify our renderTemplate
function to call
the Execute
method on the appropriate Template
from
templates
:
!srcextract.bin -src=final.go -name=renderTemplate
As you may have observed, this program has a serious security flaw: a user can supply an arbitrary path to be read/written on the server. To mitigate this, we can write a function to validate the title with a regular expression.
First, add "regexp"
to the import
list.
Then we can create a global variable to store our validation regexp:
!srcextract.bin -src=final-noclosure.go -name=titleValidator
The function regexp.MustCompile
will parse and compile the
regular expression, and return a regexp.Regexp
.
MustCompile
is distinct from Compile
in that it will
panic if the expression compilation fails, while Compile
returns
an error
as a second parameter.
Now, let's write a function that extracts the title string from the request
URL, and tests it against our TitleValidator
expression:
!srcextract.bin -src=final-noclosure.go -name=getTitle
If the title is valid, it will be returned along with a nil
error value. If the title is invalid, the function will write a
"404 Not Found" error to the HTTP connection, and return an error to the
handler.
Let's put a call to getTitle
in each of the handlers:
!srcextract.bin -src=final-noclosure.go -name=viewHandler !srcextract.bin -src=final-noclosure.go -name=editHandler !srcextract.bin -src=final-noclosure.go -name=saveHandler
Catching the error condition in each handler introduces a lot of repeated code. What if we could wrap each of the handlers in a function that does this validation and error checking? Go's function literals provide a powerful means of abstracting functionality that can help us here.
First, we re-write the function definition of each of the handlers to accept a title string:
func viewHandler(w http.ResponseWriter, r *http.Request, title string) func editHandler(w http.ResponseWriter, r *http.Request, title string) func saveHandler(w http.ResponseWriter, r *http.Request, title string)
Now let's define a wrapper function that takes a function of the above
type, and returns a function of type http.HandlerFunc
(suitable to be passed to the function http.HandleFunc
):
func makeHandler(fn func (http.ResponseWriter, *http.Request, string)) http.HandlerFunc { return func(w http.ResponseWriter, r *http.Request) { // Here we will extract the page title from the Request, // and call the provided handler 'fn' } }
The returned function is called a closure because it encloses values defined
outside of it. In this case, the variable fn
(the single argument
to makeHandler
) is enclosed by the closure. The variable
fn
will be one of our save, edit, or view handlers.
Now we can take the code from getTitle
and use it here
(with some minor modifications):
!srcextract.bin -src=final.go -name=makeHandler
The closure returned by makeHandler
is a function that takes
an http.ResponseWriter
and http.Request
(in other
words, an http.HandlerFunc
).
The closure extracts the title
from the request path, and
validates it with the TitleValidator
regexp. If the
title
is invalid, an error will be written to the
ResponseWriter
using the http.NotFound
function.
If the title
is valid, the enclosed handler function
fn
will be called with the ResponseWriter
,
Request
, and title
as arguments.
Now we can wrap the handler functions with makeHandler
in
main
, before they are registered with the http
package:
!srcextract.bin -src=final.go -name=main
Finally we remove the calls to getTitle
from the handler functions,
making them much simpler:
!srcextract.bin -src=final.go -name=viewHandler !srcextract.bin -src=final.go -name=editHandler !srcextract.bin -src=final.go -name=saveHandler
Click here to view the final code listing.
Recompile the code, and run the app:
$ go build wiki.go $ ./wiki
Visiting http://localhost:8080/view/ANewPage should present you with the page edit form. You should then be able to enter some text, click 'Save', and be redirected to the newly created page.
Here are some simple tasks you might want to tackle on your own:
tmpl/
and page data in data/
.
/view/FrontPage
.[PageName]
to <a href="/view/PageName">PageName</a>
.
(hint: you could use regexp.ReplaceAllFunc
to do this)