64 lines
1.7 KiB
TypeScript
64 lines
1.7 KiB
TypeScript
import type { RequestHandler } from '@sveltejs/kit';
|
|
import { error } from '@sveltejs/kit';
|
|
import { verify } from 'jsonwebtoken';
|
|
import { hash} from 'argon2';
|
|
import { randomBytes } from 'crypto';
|
|
import { COOKIE_SECRET } from '$env/static/private'
|
|
import { ALLOW_REGISTRATION } from '$env/static/private'
|
|
|
|
import { User } from '../../../models/User';
|
|
import { dbConnect, dbDisconnect } from '../../../utils/db';
|
|
|
|
|
|
import { getJWTFromRequest } from '../../../utils/cookie';
|
|
// header: use for bearer token for now
|
|
// recipe json in body
|
|
export const GET: RequestHandler = async ({request}) => {
|
|
const jwt = getJWTFromRequest(request)
|
|
console.log(jwt)
|
|
|
|
// Set your master secret key (replace with your own secret)
|
|
const masterSecret = COOKIE_SECRET;
|
|
const secretKey = masterSecret
|
|
let decoded
|
|
try{
|
|
decoded = await verify(jwt, secretKey);
|
|
}
|
|
catch(e){
|
|
throw error(401, "Cookies have changed, please log in again")
|
|
}
|
|
|
|
await dbConnect()
|
|
let res = await User.findOne({username: decoded.username}, 'access').lean();
|
|
await dbDisconnect()
|
|
if(!res){
|
|
throw error(404, "User for this Cookie does no longer exist")
|
|
}
|
|
return new Response(JSON.stringify({
|
|
username: decoded.username,
|
|
access: res.access
|
|
}), {status: 200})
|
|
};
|
|
|
|
async function hashPassword(password, salt) {
|
|
try {
|
|
const hashedPassword = await hash(password, salt); // Hash the password with the salt
|
|
return hashedPassword;
|
|
} catch (error) {
|
|
console.error('Error hashing password:', error);
|
|
}
|
|
}
|
|
|
|
|
|
|
|
async function createJWT(username, userSalt) {
|
|
const payload = {
|
|
username: username,
|
|
};
|
|
|
|
const masterSecret = COOKIE_SECRET;
|
|
const secretKey = masterSecret + userSalt;
|
|
const jwt = sign(payload, secretKey);
|
|
return jwt
|
|
}
|