74 lines
1.8 KiB
JavaScript
74 lines
1.8 KiB
JavaScript
const authRouter = require('express').Router();
|
|
|
|
// For creating tokens
|
|
const jwt = require('jsonwebtoken');
|
|
|
|
require('dotenv').config();
|
|
const TOKEN_KEY = process.env.TOKEN_KEY;
|
|
|
|
|
|
module.exports = authRouter;
|
|
|
|
const { addUserToDB, getUserFromDB } = require('../db');
|
|
|
|
|
|
// Get a user by its id
|
|
authRouter.get('/:id', (req, res) => {
|
|
const user = getUserFromDB(req.params.id);
|
|
console.log("Request get in /auth:", req.params.id);
|
|
|
|
if (user) {
|
|
res.status(200).send({user});
|
|
} else {
|
|
res.status(404).send({message: 'User was not found'});
|
|
}
|
|
})
|
|
|
|
// For login (authorization)
|
|
authRouter.post('/login', (req, res) => {
|
|
const { name, password } = req.body;
|
|
console.log("Request login in /auth:", name);
|
|
|
|
const user = getUserFromDB(name);
|
|
|
|
// Invalid identification
|
|
if (!user) {
|
|
res.status(401).send({message: 'Invalid credentials (id)'});
|
|
}
|
|
|
|
// Invalid authentication
|
|
if (!password || password !== user.password) {
|
|
res.status(401).send({message: 'Invalid credentials (password)'});
|
|
}
|
|
|
|
// Now, authorization
|
|
const token = jwt.sign({id: name}, TOKEN_KEY, {
|
|
expiresIn: '1h'
|
|
})
|
|
|
|
res.status(200).send({token});
|
|
})
|
|
|
|
|
|
authRouter.post('/reg', (req, res) => {
|
|
const { name, password, nickname } = req.body;
|
|
console.log("Request reg in /auth:", name);
|
|
|
|
const user = getUserFromDB(name);
|
|
|
|
// Invalid identification
|
|
if (user) {
|
|
res.status(409).send({message: 'Such id already exists'});
|
|
}
|
|
|
|
if (!name || !password || !nickname) {
|
|
res.status(401).send({message: 'Empty or invalid fields'});
|
|
}
|
|
|
|
// Add to 'DB'
|
|
const newUser = {id: name, password: password, nickname: nickname};
|
|
addUserToDB(newUser)
|
|
|
|
res.status(200).send({user: newUser});
|
|
})
|