// Copyright (C) 2019 ModZero // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU Affero General Public License as // published by the Free Software Foundation, either version 3 of the // License, or (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU Affero General Public License for more details. // // You should have received a copy of the GNU Affero General Public License // along with this program. If not, see . import express from "express"; import createHttpError from "http-errors"; import { DateTime } from "luxon"; import { box, unbox } from "../crypto"; import { db } from "../db"; const router = express.Router(); router.post("/", async (req, res, next) => { const userID = await db.users.login(req.body.email, req.body.password); if (userID.isSome()) { res.send(`Hi, ${userID.some()}`); } else { res.send(`Go away.`); } }); interface Token { expires: string; } router.get("/bootstrap", async (req, res, next) => { const token: Token = { expires: DateTime.local() .plus({ hours: 2 }) .toISO() }; req.log.info("Token issued", { token: box(token) }); }); router.post("/bootstrap", async (req, res, next) => { const token: Token = unbox(req.body.token); const expired = DateTime.fromISO(token.expires).diffNow(); if (expired.as("milliseconds") < 0) { next(createHttpError(401)); return; } const email: string = req.body.email; const password: string = req.body.password; if (!email || !password || password.length < 8) { res.send("Please provide an email and a password longer than 8 characters"); return; } await db.users.create(email, password); }); export default router;