33 lines
825 B
JavaScript
33 lines
825 B
JavaScript
import { serialize } from 'cookie';
|
|
import { createSecureToken } from 'lib/crypto';
|
|
import { getAccountByHash } from 'lib/queries';
|
|
import { AUTH_COOKIE_NAME } from 'lib/constants';
|
|
import { ok, unauthorized, badRequest } from 'lib/response';
|
|
|
|
export default async (req, res) => {
|
|
const { hash } = req.body;
|
|
|
|
if (!hash) {
|
|
return badRequest(res);
|
|
}
|
|
|
|
const account = await getAccountByHash(hash);
|
|
|
|
if (account) {
|
|
const { user_id, username, is_admin } = account;
|
|
const token = await createSecureToken({ user_id, username, is_admin });
|
|
const cookie = serialize(AUTH_COOKIE_NAME, token, {
|
|
path: '/',
|
|
httpOnly: true,
|
|
sameSite: true,
|
|
maxAge: 60 * 60 * 24 * 365,
|
|
});
|
|
|
|
res.setHeader('Set-Cookie', [cookie]);
|
|
|
|
return ok(res, { token });
|
|
}
|
|
|
|
return unauthorized(res);
|
|
};
|