79 lines
2.4 KiB
JavaScript
79 lines
2.4 KiB
JavaScript
/* eslint-disable no-undef */
|
|
import express from 'express';
|
|
import { pool } from '../modules/database.js';
|
|
import { generateToken } from '../modules/token.js';
|
|
import { requestLimiter, respondWithStatus, respondWithStatusJSON } from '../modules/requestHandler.js';
|
|
|
|
const router = express.Router();
|
|
|
|
router.post('/register', requestLimiter, async (req, res) => {
|
|
const { username, password } = req.body;
|
|
if ([ username, password ].every(Boolean)) {
|
|
try {
|
|
const [existingUsername] = await pool.execute('SELECT * FROM users WHERE username = ? LIMIT 1', [username]);
|
|
if (existingUsername.length) {
|
|
return await respondWithStatus(res, 400, 'Username is already taken');
|
|
}
|
|
|
|
const hashedPassword = await Bun.password.hash(password);
|
|
const [result] = await pool.execute(
|
|
'INSERT INTO users (username, password) VALUES (?, ?)', [ username, hashedPassword ],
|
|
);
|
|
if (result.affectedRows === 0) {
|
|
return await respondWithStatus(res, 500, 'Error storing user');
|
|
}
|
|
return await respondWithStatus(res, 200, 'Successfully registered');
|
|
}
|
|
catch (error) {
|
|
console.error(error);
|
|
return await respondWithStatus(res, 500, 'An error has occured');
|
|
}
|
|
}
|
|
else {
|
|
return await respondWithStatus(res, 400, 'Missing fields');
|
|
}
|
|
});
|
|
|
|
router.post('/login', requestLimiter, async (req, res) => {
|
|
const { username, password } = req.body;
|
|
if ([username, password].every(Boolean)) {
|
|
try {
|
|
const [rows] = await pool.execute(
|
|
'SELECT * FROM users WHERE username = ? LIMIT 1', [username],
|
|
);
|
|
if (!rows.length) {
|
|
return await respondWithStatus(res, 404, 'Incorrect username or email');
|
|
}
|
|
const user = rows[0];
|
|
const passwordMatch = await Bun.password.verify(password, user.password);
|
|
if (!passwordMatch) return await respondWithStatus(res, 401, 'Incorrect password');
|
|
|
|
const token = await generateToken(user.id, password);
|
|
res.cookie('token', token, {
|
|
expires: new Date(Date.now() + 14 * 24 * 60 * 60 * 1000),
|
|
httpOnly: true,
|
|
secure: true,
|
|
sameSite: 'strict',
|
|
});
|
|
return await respondWithStatusJSON(res, 200, {
|
|
message: 'Login successful',
|
|
token: token,
|
|
user: {
|
|
id: user.id,
|
|
username: user.username,
|
|
email: user.email,
|
|
name: user.name,
|
|
},
|
|
});
|
|
}
|
|
catch (error) {
|
|
console.error(error);
|
|
return await respondWithStatus(res, 500, 'An error has occured');
|
|
}
|
|
}
|
|
else {
|
|
return await respondWithStatus(res, 400, 'Missing fields');
|
|
}
|
|
});
|
|
|
|
export default router; |