Update login pipeline. Limit login to only password

src/pages/api/auth/login.ts

@@ -1,14 +1,9 @@
 import type {
-    BUN_SQLITE_WGUI_SSO_LOGIN_CODES,
     BUN_SQLITE_WGUI_USERS,
     BunSQLiteTables,
 } from "@/db/types/db";
-import { AppData } from "@/src/data/app-data";
 import loginUser from "@/src/functions/backend/auth/login-user";
-import type { ApiReqParams, SSOAuth } from "@/src/types";
-import { getCookie } from "@/src/utils/cookies";
-import { decrypt } from "@/src/utils/crypt";
-import EJSON from "@/src/utils/ejson";
+import type { ApiReqParams } from "@/src/types";
 import BunSQLite from "@moduletrace/bun-sqlite";
 import type {
     APIResponseObject,
@@ -16,51 +11,17 @@ import type {
 } from "@moduletrace/bunext/types";
 
 export const handler: BunextAPIRouteHandler<APIResponseObject> = async ({
-    req,
     body,
 }) => {
     try {
-        const { sso_code } = body as ApiReqParams;
+        const { login } = body as ApiReqParams;
 
-        const sso_cookie = getCookie(req, AppData["SSOAuthCookieName"]);
-
-        if (!sso_cookie) {
-            throw new Error(`No SSO session found!`);
+        if (!login?.email_or_username) {
+            throw new Error(`Please enter your email or username`);
         }
 
-        if (!sso_code) {
-            throw new Error(`No SSO code sent!`);
-        }
-
-        const decrypted_sso_json = await decrypt(sso_cookie);
-        const decrypted_sso_object = EJSON.parse(decrypted_sso_json) as SSOAuth;
-
-        const target_sso = (
-            await BunSQLite.select<
-                BUN_SQLITE_WGUI_SSO_LOGIN_CODES,
-                (typeof BunSQLiteTables)[number]
-            >({
-                table: "sso_login_codes",
-                query: {
-                    query: {
-                        code: {
-                            value: sso_code,
-                        },
-                    },
-                },
-            })
-        ).singleRes;
-
-        if (!target_sso?.code) {
-            throw new Error(`Invalid Code!`);
-        }
-
-        const now = Date.now();
-        const time_elapsed = now - Number(target_sso.updated_at);
-        const expirty_time = AppData["SSOCodeExpiryMinutes"] * 60 * 1000;
-
-        if (time_elapsed > expirty_time) {
-            throw new Error(`Code Expired. Please Login again.`);
+        if (!login?.password) {
+            throw new Error(`Please enter your password`);
         }
 
         const target_user = (
@@ -71,16 +32,35 @@ export const handler: BunextAPIRouteHandler<APIResponseObject> = async ({
                 table: "users",
                 query: {
                     query: {
-                        email: decrypted_sso_object.email
-                            ? { value: decrypted_sso_object.email }
-                            : undefined,
+                        email: {
+                            value: login.email_or_username,
+                        },
+                        username: {
+                            value: login.email_or_username,
+                        },
                     },
+                    searchOperator: "OR",
                 },
             })
-        ).singleRes;
+        )?.singleRes;
 
-        if (!target_user?.id) {
-            throw new Error(`This device wasn't used to get this SSO code`);
+        if (!target_user?.id || !target_user.password) {
+            throw new Error(`Invalid email or password`);
+        }
+
+        let password_matches = false;
+
+        try {
+            password_matches = await Bun.password.verify(
+                login.password,
+                target_user.password,
+            );
+        } catch (error) {
+            password_matches = false;
+        }
+
+        if (!password_matches) {
+            throw new Error(`Invalid email or password`);
         }
 
         return await loginUser({
@@ -92,4 +72,4 @@ export const handler: BunextAPIRouteHandler<APIResponseObject> = async ({
             msg: error.message,
         };
     }
-};
+};