97 lines
2.8 KiB
Plaintext
97 lines
2.8 KiB
Plaintext
---
|
|
import Layout from '../layouts/Layout.astro';
|
|
import NavBar from '../components/NavBar.astro';
|
|
|
|
import { getUserByNickOrEmail, updateLastLogin } from '../lib/db/users';
|
|
|
|
import config from '../../config.json';
|
|
|
|
import { verify } from 'argon2';
|
|
import locationManager from '../lib/classes/managers/LocationManager';
|
|
|
|
let error = "";
|
|
|
|
if(Astro.request.method === "POST") {
|
|
const data = await Astro.request.formData();
|
|
const username = data.get("username") as string | "";
|
|
const password = data.get("password") as string | "";
|
|
|
|
if(username === "") {
|
|
error = "username is required";
|
|
Astro.redirect("/login");
|
|
}
|
|
|
|
if(password === "") {
|
|
error = "password is required";
|
|
Astro.redirect("/login");
|
|
}
|
|
|
|
const userDB = await getUserByNickOrEmail(username as string);
|
|
|
|
if(userDB !== null && await verify(userDB.password, password as string)) {
|
|
const user = locationManager.getUser(userDB._id);
|
|
if(!user) throw new Error("User not found");
|
|
const sessionTime = config.SESSION_TIME_MINUTES * 60;
|
|
|
|
const res = await fetch(`https://localhost:4321/api/auth/generateAccessToken`, {
|
|
method: 'POST',
|
|
body: JSON.stringify({
|
|
username,
|
|
createdFrom: 'loginForm',
|
|
duration: sessionTime
|
|
}),
|
|
headers: {
|
|
'Content-Type': 'application/json',
|
|
'Authorization': 'Bearer ' + config.MASTER_ACCESSTOKEN
|
|
}
|
|
});
|
|
|
|
const token = (await res.json()).accessToken;
|
|
|
|
await updateLastLogin(user);
|
|
|
|
Astro.cookies.set("sessionToken", token, {
|
|
path: "/",
|
|
maxAge: sessionTime,
|
|
sameSite: "lax",
|
|
secure: true
|
|
});
|
|
|
|
Astro.cookies.set("username", username, {
|
|
path: "/",
|
|
maxAge: sessionTime,
|
|
sameSite: "lax",
|
|
secure: true
|
|
});
|
|
|
|
Astro.cookies.set("userid", user.id?.toString() as string, {
|
|
path: "/",
|
|
maxAge: sessionTime,
|
|
sameSite: "lax",
|
|
secure: true
|
|
});
|
|
|
|
Astro.cookies.set("planetid", user.mainPlanet._id, {
|
|
path: "/",
|
|
maxAge: sessionTime,
|
|
sameSite: "lax",
|
|
secure: true
|
|
});
|
|
|
|
return Astro.redirect("/game");
|
|
} else {
|
|
error = "invalid username or password";
|
|
return Astro.redirect("/login");
|
|
}
|
|
}
|
|
---
|
|
|
|
<Layout title="Login">
|
|
<NavBar loggedIn="false" active="login" />
|
|
<form method="POST">
|
|
<input type="text" name="username" placeholder="username" /><br />
|
|
<input type="password" name="password" placeholder="password" /><br />
|
|
<input type="submit" value="login" />
|
|
{ error !== "" ? <p style="color: red;">{error}</p> : "" }
|
|
</form>
|
|
</Layout> |