133 lines
2.6 KiB
TypeScript
133 lines
2.6 KiB
TypeScript
import { Router } from "@oak/oak";
|
|
|
|
import {
|
|
APIErrorCode,
|
|
APIException,
|
|
isLoginUserRequest,
|
|
isRegisterUserRequest,
|
|
} from "../model/interfaces.ts";
|
|
|
|
import { createJWT, verifyPassword } from "../lib/jwt.ts";
|
|
import { type AuthContext, authMiddleware } from "../middleware/auth.ts";
|
|
import {
|
|
createUser,
|
|
getUserById,
|
|
getUserByUsername,
|
|
} from "../services/user-service.ts";
|
|
|
|
// Users router
|
|
const router = new Router({ prefix: "/api/users" });
|
|
|
|
// Register a new user
|
|
router.post("/register", async (ctx) => {
|
|
try {
|
|
const body = await ctx.request.body.json();
|
|
|
|
if (!isRegisterUserRequest(body)) {
|
|
throw new APIException(
|
|
APIErrorCode.VALIDATION_ERROR,
|
|
400,
|
|
"Invalid request",
|
|
);
|
|
}
|
|
|
|
const user = await createUser(body);
|
|
const token = await createJWT({
|
|
userId: user.id,
|
|
username: user.username,
|
|
isAdmin: user.isAdmin,
|
|
});
|
|
|
|
ctx.response.status = 201;
|
|
ctx.response.body = {
|
|
success: true,
|
|
data: {
|
|
token,
|
|
user,
|
|
},
|
|
};
|
|
} catch (err) {
|
|
console.error(err);
|
|
|
|
throw new APIException(
|
|
APIErrorCode.SERVER_ERROR,
|
|
500,
|
|
"Failed to register user",
|
|
);
|
|
}
|
|
});
|
|
|
|
// Login
|
|
router.post("/login", async (ctx) => {
|
|
try {
|
|
const body = await ctx.request.body.json();
|
|
|
|
if (!isLoginUserRequest(body)) {
|
|
throw new APIException(
|
|
APIErrorCode.VALIDATION_ERROR,
|
|
400,
|
|
"Invalid request",
|
|
);
|
|
}
|
|
|
|
const user = getUserByUsername(body.username);
|
|
const valid = await verifyPassword(body.password, user.passwordHash);
|
|
|
|
if (!valid) {
|
|
throw new APIException(
|
|
APIErrorCode.VALIDATION_ERROR,
|
|
401,
|
|
"Invalid username or password",
|
|
);
|
|
}
|
|
|
|
const token = await createJWT({
|
|
userId: user.id,
|
|
username: user.username,
|
|
isAdmin: user.isAdmin,
|
|
});
|
|
|
|
ctx.response.body = {
|
|
success: true,
|
|
data: {
|
|
token,
|
|
user,
|
|
},
|
|
};
|
|
} catch (err) {
|
|
console.error(err);
|
|
|
|
throw new APIException(APIErrorCode.SERVER_ERROR, 500, "Failed to login");
|
|
}
|
|
});
|
|
|
|
// Get current user profile
|
|
router.get("/me", authMiddleware, (ctx: AuthContext) => {
|
|
try {
|
|
if (!ctx.state.user) {
|
|
throw new APIException(
|
|
APIErrorCode.UNAUTHORIZED,
|
|
401,
|
|
"Not authenticated",
|
|
);
|
|
}
|
|
|
|
const user = getUserById(ctx.state.user.userId);
|
|
|
|
ctx.response.body = {
|
|
success: true,
|
|
data: user,
|
|
};
|
|
} catch (err) {
|
|
console.error(err);
|
|
|
|
throw new APIException(
|
|
APIErrorCode.SERVER_ERROR,
|
|
500,
|
|
"Failed to fetch user profile",
|
|
);
|
|
}
|
|
});
|
|
|
|
export default router;
|