Initial Commit

2024-07-23 13:49:48 +02:00
commit 91a8840c3c
191 changed files with 36022 additions and 0 deletions
@@ -0,0 +1,125 @@
+import { Controller, Get, Post } from "@overnightjs/core";
+import { UserSchemas, UtilitySchemas } from "@plunk/shared";
+import type { Request, Response } from "express";
+import { prisma } from "../database/prisma";
+import { NotAllowed, NotFound } from "../exceptions";
+import { jwt } from "../middleware/auth";
+import { AuthService } from "../services/AuthService";
+import { UserService } from "../services/UserService";
+import { Keys } from "../services/keys";
+import { REDIS_ONE_MINUTE, redis } from "../services/redis";
+import { createHash } from "../util/hash";
+
+@Controller("auth")
+export class Auth {
+	@Post("login")
+	public async login(req: Request, res: Response) {
+		const { email, password } = UserSchemas.credentials.parse(req.body);
+
+		const user = await UserService.email(email);
+
+		if (!user) {
+			return res.json({ success: false, data: "Incorrect email or password" });
+		}
+
+		if (!user.password) {
+			return res.json({
+				success: "redirect",
+				redirect: `/auth/reset?id=${user.id}`,
+			});
+		}
+
+		const verified = await AuthService.verifyCredentials(email, password);
+
+		if (!verified) {
+			return res.json({ success: false, data: "Incorrect email or password" });
+		}
+
+		await redis.set(
+			Keys.User.id(user.id),
+			JSON.stringify(user),
+			"EX",
+			REDIS_ONE_MINUTE * 60,
+		);
+
+		const token = jwt.sign(user.id);
+		const cookie = UserService.cookieOptions();
+
+		return res
+			.cookie(UserService.COOKIE_NAME, token, cookie)
+			.json({ success: true, data: { id: user.id, email: user.email } });
+	}
+
+	@Post("signup")
+	public async signup(req: Request, res: Response) {
+		const { email, password } = UserSchemas.credentials.parse(req.body);
+
+		const user = await UserService.email(email);
+
+		if (user) {
+			return res.json({
+				success: false,
+				data: "That email is already associated with another user",
+			});
+		}
+
+		const created_user = await prisma.user.create({
+			data: {
+				email,
+				password: await createHash(password),
+			},
+		});
+
+		await redis.set(
+			Keys.User.id(created_user.id),
+			JSON.stringify(created_user),
+			"EX",
+			REDIS_ONE_MINUTE * 60,
+		);
+
+		const token = jwt.sign(created_user.id);
+		const cookie = UserService.cookieOptions();
+
+		return res.cookie(UserService.COOKIE_NAME, token, cookie).json({
+			success: true,
+			data: { id: created_user.id, email: created_user.email },
+		});
+	}
+
+	@Post("reset")
+	public async reset(req: Request, res: Response) {
+		const { id, password } = UtilitySchemas.id
+			.merge(UserSchemas.credentials.pick({ password: true }))
+			.parse(req.body);
+
+		const user = await UserService.id(id);
+
+		if (!user) {
+			throw new NotFound("user");
+		}
+
+		if (user.password) {
+			throw new NotAllowed();
+		}
+
+		await prisma.user.update({
+			where: { id },
+			data: { password: await createHash(password) },
+		});
+
+		await redis.del(Keys.User.id(user.id));
+		await redis.del(Keys.User.email(user.email));
+
+		return res.json({ success: true });
+	}
+
+	@Get("logout")
+	public logout(req: Request, res: Response) {
+		res.cookie(
+			UserService.COOKIE_NAME,
+			"",
+			UserService.cookieOptions(new Date()),
+		);
+		return res.json(true);
+	}
+}