From baaa3bff5ba5d4c9e2e3d23b0a8265363ef45d66 Mon Sep 17 00:00:00 2001
From: Eli Ribble <eli@gleipnir.technology>
Date: Tue, 21 Apr 2026 22:48:31 +0000
Subject: [PATCH] Make request parser handle form-encoded content

This fixes a new signin bug
---
 api/handler.go | 20 ++++++++++++++++----
 api/signin.go  |  4 ++--
 2 files changed, 18 insertions(+), 6 deletions(-)

diff --git a/api/handler.go b/api/handler.go
index a146f93d..88a47293 100644
--- a/api/handler.go
+++ b/api/handler.go
@@ -342,12 +342,24 @@ func handlerFormPost[RequestType any, ResponseType any](f handlerFunctionPostFor
 	}
 }
 func parseRequest[RequestType any](r *http.Request) (*RequestType, *nhttp.ErrorWithStatus) {
+	var err error
 	var req RequestType
-	body, err := io.ReadAll(r.Body)
-	if err != nil {
-		return nil, nhttp.NewError("Failed to read body: %w", err)
+	content_type := r.Header.Get("Content-Type")
+	if content_type == "application/json" {
+		body, e := io.ReadAll(r.Body)
+		if e != nil {
+			return nil, nhttp.NewError("Failed to read body: %w", err)
+		}
+		err = json.Unmarshal(body, &req)
+	} else if content_type == "application/x-www-form-urlencoded" {
+		e := r.ParseForm()
+		if err != nil {
+			return nil, nhttp.NewBadRequest("parsing form: %w", e)
+		}
+		err = decoder.Decode(&req, r.PostForm)
+	} else {
+		return nil, nhttp.NewBadRequest("unrecognized content type '%s'", content_type)
 	}
-	err = json.Unmarshal(body, &req)
 	if err != nil {
 		return nil, nhttp.NewErrorStatus(http.StatusBadRequest, "Failed to decode request: %w", err)
 	}
diff --git a/api/signin.go b/api/signin.go
index eef77a01..319a2a44 100644
--- a/api/signin.go
+++ b/api/signin.go
@@ -12,8 +12,8 @@ import (
 )
 
 type reqSignin struct {
-	Password string `json:"password"`
-	Username string `json:"username"`
+	Password string `schema:"password"`
+	Username string `schema:"username"`
 }
 
 func postSignin(ctx context.Context, r *http.Request, req reqSignin) (string, *nhttp.ErrorWithStatus) {