first

src/servers/api/auth/signin.ts

@@ -0,0 +1,46 @@
+import type { Handler } from 'hono';
+import { mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { officerdb, eq, and, Users, Passkeys } from 'officerdb';
+import { sign } from '@@/jwt';
+import { getClaudeDir } from '@@/data-path';
+import argon2 from 'argon2';
+import * as errors from '@@/custom-errors';
+
+const TEST_USERS: number[] = [];
+
+export const signinHandler: Handler = async function (ctx) {
+  const { email, password } = ctx.get('body');
+  const origin = ctx.get('origin');
+  const dbUser = await officerdb.query.Users.findFirst({
+    where: eq(Users.email, email),
+  });
+
+  const passkeys = await officerdb.query.Passkeys.findMany({
+    where: and(eq(Passkeys.email, email), eq(Passkeys.origin, origin)),
+  });
+
+  if (!dbUser || !dbUser.password) throw errors.UNAUTHORIZED();
+  const { status } = dbUser;
+  if (status !== 'Active') throw errors.UNAUTHORIZED();
+  const isValidPassword = TEST_USERS.includes(dbUser.id) || (await argon2.verify(dbUser.password, password));
+  if (!isValidPassword) throw errors.UNAUTHORIZED();
+
+  const { id, name, role } = dbUser;
+
+  mkdir(join(getClaudeDir(email), 'archived'), { recursive: true }).catch(() => {});
+
+  const tokenUser = { id, email, name, role, passkeys: passkeys.length };
+
+  if (passkeys.length > 0 && !origin.startsWith('chrome-extension://') && !TEST_USERS.includes(dbUser.id)) {
+    return ctx.json({ user: tokenUser });
+  }
+
+  const token = await sign(tokenUser);
+
+  if (origin.startsWith('chrome-extension://')) {
+    // console.log('token', token);
+  }
+
+  return ctx.json({ token, user: tokenUser });
+};