First Commit

src/pages/api/auth/login.ts

@@ -0,0 +1,95 @@
+import type {
+    BUN_SQLITE_WGUI_SSO_LOGIN_CODES,
+    BUN_SQLITE_WGUI_USERS,
+    BunSQLiteTables,
+} from "@/db/types/db";
+import { AppData } from "@/src/data/app-data";
+import loginUser from "@/src/functions/backend/auth/login-user";
+import type { ApiReqParams, SSOAuth } from "@/src/types";
+import { getCookie } from "@/src/utils/cookies";
+import { decrypt } from "@/src/utils/crypt";
+import EJSON from "@/src/utils/ejson";
+import BunSQLite from "@moduletrace/bun-sqlite";
+import type {
+    APIResponseObject,
+    BunextAPIRouteHandler,
+} from "@moduletrace/bunext/types";
+
+export const handler: BunextAPIRouteHandler<APIResponseObject> = async ({
+    req,
+    body,
+}) => {
+    try {
+        const { sso_code } = body as ApiReqParams;
+
+        const sso_cookie = getCookie(req, AppData["SSOAuthCookieName"]);
+
+        if (!sso_cookie) {
+            throw new Error(`No SSO session found!`);
+        }
+
+        if (!sso_code) {
+            throw new Error(`No SSO code sent!`);
+        }
+
+        const decrypted_sso_json = await decrypt(sso_cookie);
+        const decrypted_sso_object = EJSON.parse(decrypted_sso_json) as SSOAuth;
+
+        const target_sso = (
+            await BunSQLite.select<
+                BUN_SQLITE_WGUI_SSO_LOGIN_CODES,
+                (typeof BunSQLiteTables)[number]
+            >({
+                table: "sso_login_codes",
+                query: {
+                    query: {
+                        code: {
+                            value: sso_code,
+                        },
+                    },
+                },
+            })
+        ).singleRes;
+
+        if (!target_sso?.code) {
+            throw new Error(`Invalid Code!`);
+        }
+
+        const now = Date.now();
+        const time_elapsed = now - Number(target_sso.updated_at);
+        const expirty_time = AppData["SSOCodeExpiryMinutes"] * 60 * 1000;
+
+        if (time_elapsed > expirty_time) {
+            throw new Error(`Code Expired. Please Login again.`);
+        }
+
+        const target_user = (
+            await BunSQLite.select<
+                BUN_SQLITE_WGUI_USERS,
+                (typeof BunSQLiteTables)[number]
+            >({
+                table: "users",
+                query: {
+                    query: {
+                        email: decrypted_sso_object.email
+                            ? { value: decrypted_sso_object.email }
+                            : undefined,
+                    },
+                },
+            })
+        ).singleRes;
+
+        if (!target_user?.id) {
+            throw new Error(`This device wasn't used to get this SSO code`);
+        }
+
+        return await loginUser({
+            user_id: target_user.id,
+        });
+    } catch (error: any) {
+        return {
+            success: false,
+            msg: error.message,
+        };
+    }
+};