67 lines
2.6 KiB
JavaScript
67 lines
2.6 KiB
JavaScript
import express from 'express';
|
|
import { database } from '../Classes/Database';
|
|
import jwt from 'jsonwebtoken';
|
|
|
|
const router = express.Router();
|
|
|
|
// POST to login using username and password
|
|
router.post('/login', async (req, res) => {
|
|
try {
|
|
const { username, password } = req.body;
|
|
if (!username || !password) {
|
|
res.status(400).json({ error: 'Bad Request' });
|
|
}
|
|
const rows = await database.execute('SELECT * FROM users WHERE username = ?', [username]);
|
|
if (rows.length === 0) {
|
|
res.status(401).json({ error: 'Unauthorized' });
|
|
} else {
|
|
const isPasswordValid = await Bun.password.verify(password, rows[0].password);
|
|
if (!isPasswordValid) {
|
|
res.status(401).json({ error: 'Unauthorized' });
|
|
} else {
|
|
const token = jwt.sign({ username, password }, process.env.SECRET);
|
|
res.status(200).json({ token });
|
|
}
|
|
}
|
|
} catch (error) {
|
|
res.status(500).json({ error: 'Internal Server Error' });
|
|
}
|
|
});
|
|
|
|
// POST to check if token is valid
|
|
router.post('/verify', async (req, res) => {
|
|
try {
|
|
const token = req.body.token;
|
|
if (!token) {
|
|
res.status(401).json({ error: 'Unauthorized' });
|
|
} else {
|
|
jwt.verify(token, process.env.SECRET, async (err, decoded) => {
|
|
if (err) res.status(401).json({ error: 'Unauthorized' });
|
|
const rows = await database.execute('SELECT * FROM users WHERE username = ?', [decoded.username]);
|
|
if (rows.length === 0) res.status(401).json({ error: 'Unauthorized' });
|
|
const isPasswordValid = await Bun.password.verify(decoded.password, rows[0].password);
|
|
if (!isPasswordValid) res.status(401).json({ error: 'Unauthorized' });
|
|
res.status(200).json({ message: 'Authorized' });
|
|
});
|
|
}
|
|
} catch (error) {
|
|
res.status(500).json({ error: 'Internal Server Error' });
|
|
}
|
|
});
|
|
|
|
// POST to register a new user
|
|
router.post('/register', async (req, res) => {
|
|
try {
|
|
const { username, password } = req.body;
|
|
if (!username || !password) {
|
|
res.status(400).json({ error: 'Bad Request' });
|
|
}
|
|
const hashedPassword = await Bun.password.hash(password);
|
|
await database.execute('INSERT INTO users (username, password) VALUES (?, ?)', [username, hashedPassword]);
|
|
res.status(201).json({ message: 'User created successfully' });
|
|
} catch (error) {
|
|
res.status(500).json({ error: 'Internal Server Error' });
|
|
}
|
|
});
|
|
|
|
export default router; |