first

src/servers/api/auth/verify.ts

@@ -0,0 +1,42 @@
+import type { Handler } from 'hono';
+import type { User } from 'types';
+import { officerdb, eq, Users } from 'officerdb';
+import { verify as verifyJwt, sign } from '@@/jwt';
+import argon2 from 'argon2';
+import * as errors from '@@/custom-errors';
+import { validatePassword } from './validate-password';
+
+export const verifyHandler: Handler = async function (ctx) {
+  const { verificationCode, name, password, confirmPassword } = ctx.get('body');
+  const userInfo = (await verifyJwt(verificationCode)) as User;
+  if (!userInfo) throw errors.BAD_REQUEST();
+
+  const user = await officerdb.query.Users.findFirst({
+    where: eq(Users.id, userInfo.id),
+  });
+  if (!user) throw errors.NOT_FOUND('User not found');
+
+  const updates: Record<string, unknown> = { status: 'Active' };
+
+  if (name) {
+    if (typeof name !== 'string' || !name.trim() || name.length > 128) {
+      throw errors.BAD_REQUEST('Name must be between 1 and 128 characters');
+    }
+    updates.name = name.trim();
+  }
+
+  if (password) {
+    validatePassword(password);
+    if (password !== confirmPassword) {
+      throw errors.BAD_REQUEST('Passwords do not match');
+    }
+    updates.password = await argon2.hash(password);
+  }
+
+  await officerdb.update(Users).set(updates).where(eq(Users.id, userInfo.id));
+
+  // Issue a token so the user is logged in immediately
+  const token = await sign({ id: userInfo.id, email: userInfo.email });
+
+  return ctx.json({ ok: true, token });
+};