45bca2873f
🔧 API Format Fix: - Convert register.ts to register.js using req/res pattern - Convert login.ts to login.js using req/res pattern - Convert setup-auth.ts to setup-auth.js using req/res pattern - Use CommonJS require() instead of ES6 imports - Use traditional Vercel function signature that works ✅ Working Format: - export default async function handler(req, res) - req.body for request data (auto-parsed by Vercel) - res.status().json() for responses - CommonJS modules with require() This should resolve all timeout issues and make authentication work properly.
125 lines
No EOL
3.4 KiB
JavaScript
125 lines
No EOL
3.4 KiB
JavaScript
const { Pool } = require('pg');
|
|
const bcrypt = require('bcryptjs');
|
|
const jwt = require('jsonwebtoken');
|
|
|
|
const pool = new Pool({
|
|
connectionString: process.env.DATABASE_URL,
|
|
ssl: process.env.NODE_ENV === 'production' ? { rejectUnauthorized: false } : false,
|
|
});
|
|
|
|
export default async function handler(req, res) {
|
|
if (req.method !== 'POST') {
|
|
return res.status(405).json({ error: 'Method not allowed' });
|
|
}
|
|
|
|
const client = await pool.connect();
|
|
|
|
try {
|
|
const { username, password } = req.body;
|
|
|
|
// Validate input
|
|
if (!username || !password) {
|
|
return res.status(400).json({
|
|
error: 'Username and password are required'
|
|
});
|
|
}
|
|
|
|
// Get user by username or email
|
|
const userResult = await client.query(`
|
|
SELECT id, username, email, password_hash, first_name, last_name, is_active, last_login
|
|
FROM users
|
|
WHERE (username = $1 OR email = $1) AND is_active = true
|
|
`, [username]);
|
|
|
|
if (userResult.rows.length === 0) {
|
|
return res.status(401).json({
|
|
error: 'Invalid credentials'
|
|
});
|
|
}
|
|
|
|
const user = userResult.rows[0];
|
|
|
|
// Verify password
|
|
const isValidPassword = await bcrypt.compare(password, user.password_hash);
|
|
if (!isValidPassword) {
|
|
return res.status(401).json({
|
|
error: 'Invalid credentials'
|
|
});
|
|
}
|
|
|
|
// Get user roles and permissions
|
|
const userRoles = await client.query(`
|
|
SELECT r.name, r.description,
|
|
array_agg(p.name) as permissions
|
|
FROM roles r
|
|
JOIN user_roles ur ON r.id = ur.role_id
|
|
LEFT JOIN role_permissions rp ON r.id = rp.role_id
|
|
LEFT JOIN permissions p ON rp.permission_id = p.id
|
|
WHERE ur.user_id = $1
|
|
GROUP BY r.id, r.name, r.description
|
|
`, [user.id]);
|
|
|
|
const roles = userRoles.rows.map(r => r.name);
|
|
const permissions = [...new Set(userRoles.rows.flatMap(r => r.permissions || []))];
|
|
|
|
// Generate JWT token
|
|
const jwtSecret = process.env.JWT_SECRET || 'fallback-secret-change-in-production';
|
|
const token = jwt.sign(
|
|
{
|
|
userId: user.id,
|
|
username: user.username,
|
|
email: user.email,
|
|
roles,
|
|
permissions
|
|
},
|
|
jwtSecret,
|
|
{ expiresIn: '7d' }
|
|
);
|
|
|
|
// Store session
|
|
const tokenHash = await bcrypt.hash(token, 10);
|
|
const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000); // 7 days
|
|
|
|
await client.query(`
|
|
INSERT INTO user_sessions (user_id, token_hash, expires_at, user_agent, ip_address)
|
|
VALUES ($1, $2, $3, $4, $5)
|
|
`, [
|
|
user.id,
|
|
tokenHash,
|
|
expiresAt,
|
|
req.headers['user-agent'] || null,
|
|
req.headers['x-forwarded-for'] || req.headers['x-real-ip'] || null
|
|
]);
|
|
|
|
// Update last login
|
|
await client.query(
|
|
'UPDATE users SET last_login = CURRENT_TIMESTAMP WHERE id = $1',
|
|
[user.id]
|
|
);
|
|
|
|
res.status(200).json({
|
|
success: true,
|
|
message: 'Login successful',
|
|
user: {
|
|
id: user.id,
|
|
username: user.username,
|
|
email: user.email,
|
|
firstName: user.first_name,
|
|
lastName: user.last_name,
|
|
roles,
|
|
permissions,
|
|
lastLogin: user.last_login
|
|
},
|
|
token
|
|
});
|
|
|
|
} catch (error) {
|
|
console.error('Login error:', error);
|
|
res.status(500).json({
|
|
error: 'Login failed',
|
|
details: process.env.NODE_ENV === 'development' ? error.message : undefined
|
|
});
|
|
} finally {
|
|
client.release();
|
|
}
|
|
}
|