⚡ Upgrade design & moved backend here & login and settings work with api
This commit is contained in:
@@ -0,0 +1,71 @@
|
||||
import { NextRequest, NextResponse } from 'next/server';
|
||||
import { getDBConnexion } from '../../utils';
|
||||
import { compareSync } from 'bcrypt';
|
||||
|
||||
type RequestBody = {
|
||||
username?: string;
|
||||
password?: string;
|
||||
};
|
||||
|
||||
export const POST = async (req: NextRequest) => {
|
||||
const { username, password }: RequestBody = await req.json();
|
||||
|
||||
if (!username || !password) {
|
||||
return NextResponse.json(
|
||||
{
|
||||
error: true,
|
||||
message: 'Missing username or password field in request body',
|
||||
},
|
||||
{
|
||||
status: 400,
|
||||
}
|
||||
);
|
||||
}
|
||||
|
||||
try {
|
||||
const pool = getDBConnexion();
|
||||
|
||||
const { rows } = await pool.query(
|
||||
`SELECT * FROM "user" WHERE "username"=$1 LIMIT 1;`,
|
||||
[username]
|
||||
);
|
||||
|
||||
await pool.end();
|
||||
|
||||
if (rows.length != 1) {
|
||||
return NextResponse.json({
|
||||
error: true,
|
||||
message: 'User not found',
|
||||
});
|
||||
}
|
||||
|
||||
const { id, password: hashedPassword } = rows[0];
|
||||
|
||||
if (!compareSync(password, hashedPassword)) {
|
||||
return NextResponse.json(
|
||||
{
|
||||
error: true,
|
||||
message: 'Wrong password',
|
||||
},
|
||||
{
|
||||
status: 403,
|
||||
}
|
||||
);
|
||||
}
|
||||
|
||||
return NextResponse.json({
|
||||
token: id,
|
||||
});
|
||||
} catch (error) {
|
||||
console.error(error);
|
||||
return NextResponse.json(
|
||||
{
|
||||
error: true,
|
||||
message: 'Internal error',
|
||||
},
|
||||
{
|
||||
status: 500,
|
||||
}
|
||||
);
|
||||
}
|
||||
};
|
||||
Reference in New Issue
Block a user