Updates

package-shared/functions/api/users/api-send-email-code.d.ts

@@ -1,4 +1,4 @@
-declare function _exports({ email, database, email_login_field, mail_domain, mail_port, sender, mail_username, mail_password, html, useLocal, }: {
+declare function _exports({ email, database, email_login_field, mail_domain, mail_port, sender, mail_username, mail_password, html, useLocal, response, }: {
     email: string;
     database: string;
     email_login_field?: string;
@@ -9,8 +9,9 @@ declare function _exports({ email, database, email_login_field, mail_domain, mai
     mail_password?: string;
     html: string;
     useLocal?: boolean;
-}): Promise<{
-    success: boolean;
-    msg?: string;
-}>;
+    response?: http.ServerResponse & {
+        [x: string]: any;
+    };
+}): Promise<import("../../../types").SendOneTimeCodeEmailResponse>;
 export = _exports;
+import http = require("http");

package-shared/functions/api/users/api-send-email-code.js

@@ -3,6 +3,9 @@
 const LOCAL_DB_HANDLER = require("../../../utils/backend/global-db/LOCAL_DB_HANDLER");
 const varDatabaseDbHandler = require("../../backend/varDatabaseDbHandler");
 const nodemailer = require("nodemailer");
+const http = require("http");
+const getAuthCookieNames = require("../../backend/cookies/get-auth-cookie-names");
+const encrypt = require("../../dsql/encrypt");
 
 /**
  * # Send Email Login Code
@@ -18,8 +21,9 @@ const nodemailer = require("nodemailer");
  * @param {string} [param.mail_password]
  * @param {string} param.html
  * @param {boolean} [param.useLocal]
+ * @param {http.ServerResponse & Object<string,any>} [param.response]
  *
- * @returns {Promise<{success: boolean, msg?: string}>}
+ * @returns {Promise<import("../../../types").SendOneTimeCodeEmailResponse>}
  */
 module.exports = async function apiSendEmailCode({
     email,
@@ -32,6 +36,7 @@ module.exports = async function apiSendEmailCode({
     mail_password,
     html,
     useLocal,
+    response,
 }) {
     if (email?.match(/ /)) {
         return {
@@ -39,10 +44,7 @@ module.exports = async function apiSendEmailCode({
             msg: "Invalid Email/Password format",
         };
     }
-
-    ////////////////////////////////////////
-    ////////////////////////////////////////
-    ////////////////////////////////////////
+    const createdAt = Date.now();
 
     const foundUserQuery = `SELECT * FROM users WHERE email = ?`;
     const foundUserValues = [email];
@@ -74,7 +76,7 @@ module.exports = async function apiSendEmailCode({
         return code;
     }
 
-    if (foundUser && foundUser[0] && email_login_field) {
+    if (foundUser?.[0] && email_login_field) {
         const tempCode = generateCode();
 
         let transporter = nodemailer.createTransport({
@@ -102,7 +104,7 @@ module.exports = async function apiSendEmailCode({
         if (!info?.accepted) throw new Error("Mail not Sent!");
 
         const setTempCodeQuery = `UPDATE users SET ${email_login_field} = ? WHERE email = ?`;
-        const setTempCodeValues = [tempCode + `-${Date.now()}`, email];
+        const setTempCodeValues = [tempCode + `-${createdAt}`, email];
 
         let setTempCode = await varDatabaseDbHandler({
             queryString: setTempCodeQuery,
@@ -110,10 +112,34 @@ module.exports = async function apiSendEmailCode({
             database: database,
             useLocal,
         });
-    }
 
-    return {
-        success: true,
-        msg: "Success",
-    };
+        /** @type {import("../../../types").SendOneTimeCodeEmailResponse} */
+        const resObject = {
+            success: true,
+            code: tempCode,
+            email: email,
+            createdAt,
+            msg: "Success",
+        };
+
+        if (response) {
+            const keyNames = getAuthCookieNames();
+            const oneTimeCodeCookieName = keyNames.oneTimeCodeName;
+
+            const encryptedPayload = encrypt({
+                data: JSON.stringify(resObject),
+            });
+
+            response?.setHeader("Set-Cookie", [
+                `${oneTimeCodeCookieName}=${encryptedPayload};samesite=strict;path=/;HttpOnly=true;Secure=true`,
+            ]);
+        }
+
+        return resObject;
+    } else {
+        return {
+            success: false,
+            msg: "Invalid Email/Password format",
+        };
+    }
 };