160 lines
3.6 KiB
TypeScript
160 lines
3.6 KiB
TypeScript
import { z } from "zod/v4";
|
|
import { zStrongPassword } from "~/hooks/useStrongPassword";
|
|
import {
|
|
adminProcedure,
|
|
createTRPCRouter,
|
|
protectedProcedure,
|
|
publicProcedure,
|
|
} from "~/server/api/trpc";
|
|
import {
|
|
createUserAdmin,
|
|
logIn,
|
|
logOut,
|
|
passwordChange,
|
|
swapAuth,
|
|
} from "~/server/controllers/auth.controller";
|
|
import {
|
|
genPasswordResetToken,
|
|
isTokenValid,
|
|
passwordOverrideHandler,
|
|
pwResetSendLinkHandler,
|
|
pwResetTokenFromMailHandler,
|
|
resetPasswordFromTokenHandler,
|
|
} from "~/server/services/auth.service";
|
|
import { zUserId } from "~/server/utils/zod_types";
|
|
|
|
// Create a new ratelimiter, that allows 10 requests per 10 seconds
|
|
/*
|
|
const ratelimit = new RateLimiterHandler({
|
|
windowSize: 10,
|
|
maxRequests: 10,
|
|
analytics: true,
|
|
});
|
|
*/
|
|
|
|
export const authRouter = createTRPCRouter({
|
|
loginUser: publicProcedure
|
|
.input(
|
|
z.object({
|
|
email: z.email(),
|
|
password: z.string(),
|
|
}),
|
|
)
|
|
.mutation(async ({ input, ctx }) => {
|
|
return await logIn({
|
|
...input,
|
|
ctx: ctx,
|
|
});
|
|
}),
|
|
swapUser: adminProcedure
|
|
.input(
|
|
z.object({
|
|
id: zUserId,
|
|
}),
|
|
)
|
|
.mutation(async ({ ctx, input }) => {
|
|
return await swapAuth({ ctx, userId: input.id });
|
|
}),
|
|
|
|
logoutUser: protectedProcedure.mutation(async ({ ctx }) => {
|
|
await logOut({ ctx: ctx });
|
|
return "logout success";
|
|
}),
|
|
|
|
getSession: publicProcedure.query(async ({ ctx }) => {
|
|
if (ctx.session?.isBlocked) return null;
|
|
return ctx.session;
|
|
}),
|
|
addUserAdmin: adminProcedure
|
|
.input(
|
|
z.object({
|
|
email: z.email(),
|
|
password: zStrongPassword,
|
|
nome: z.string().nonempty("Inserisci un nome valido"),
|
|
cognome: z.string().nonempty("Inserisci un cognome valido"),
|
|
telefono: z.string().nonempty("Inserisci un numero di telefono"),
|
|
}),
|
|
)
|
|
.mutation(async ({ input }) => {
|
|
return await createUserAdmin({ ...input });
|
|
}),
|
|
|
|
genPswResetToken: adminProcedure
|
|
.input(z.object({ id: zUserId }))
|
|
.mutation(async ({ input }) => {
|
|
return await genPasswordResetToken({ id: input.id });
|
|
}),
|
|
resetPasswordFromToken: publicProcedure
|
|
.input(
|
|
z.object({
|
|
newpassword: z.string(),
|
|
resetToken: z.string(),
|
|
}),
|
|
)
|
|
.mutation(async ({ input }) => {
|
|
return await resetPasswordFromTokenHandler({
|
|
newpassword: input.newpassword,
|
|
token: input.resetToken,
|
|
});
|
|
}),
|
|
pwResetGenTokenMail: publicProcedure
|
|
.input(z.object({ email: z.string() }))
|
|
.mutation(async ({ input }) => {
|
|
return await pwResetTokenFromMailHandler({
|
|
email: input.email,
|
|
});
|
|
}),
|
|
checkTokenValidity: publicProcedure
|
|
.input(z.object({ token: z.string() }))
|
|
.query(async ({ input }) => {
|
|
return await isTokenValid({ token: input.token });
|
|
}),
|
|
sendResetLink: publicProcedure
|
|
.input(z.object({ email: z.string() }))
|
|
.mutation(async ({ input }) => {
|
|
return await pwResetSendLinkHandler({
|
|
email: input.email,
|
|
});
|
|
}),
|
|
|
|
OverridePassword: adminProcedure
|
|
.input(
|
|
z.object({
|
|
id: zUserId,
|
|
password: z.string(),
|
|
}),
|
|
)
|
|
.mutation(async ({ input }) => {
|
|
return await passwordOverrideHandler({ input });
|
|
}),
|
|
UpdatePasswordAndLogin: publicProcedure
|
|
.input(
|
|
z.object({
|
|
id: zUserId,
|
|
password: z.string(),
|
|
}),
|
|
)
|
|
.mutation(async ({ input, ctx }) => {
|
|
await passwordOverrideHandler({ input });
|
|
if (!ctx.session) {
|
|
await swapAuth({
|
|
ctx: ctx,
|
|
userId: input.id,
|
|
});
|
|
}
|
|
return true;
|
|
}),
|
|
ChangePassword: protectedProcedure
|
|
.input(
|
|
z.object({
|
|
oldpassword: z.string(),
|
|
newpassword: z.string(),
|
|
}),
|
|
)
|
|
.mutation(async ({ ctx, input }) => {
|
|
return await passwordChange({
|
|
userId: ctx.session.id,
|
|
...input,
|
|
});
|
|
}),
|
|
});
|