Feature/login formular

.gitignore

@@ -56,4 +56,5 @@ web-build/
 *-mock.*
 deployment/db/
 *-mock.*
-test.js
+test.js
+**/*.tsbuildinfo

.prettierignore

@@ -11,3 +11,4 @@ packages/frontend/mobile/ios
 packages/frontend/mobile/android
 deployment/mysql/data
 **/types/database.ts
+**/*.tsbuildinfo

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "Devdb.colorTheme": "dark"
+}

eslint.config.mjs

@@ -40,6 +40,7 @@ export default typescriptPlugin.config([
       'packages/frontend/mobile/ios',
       'packages/frontend/mobile/android',
       'deployment/mysql/data',
+      '**/*.tsbuildinfo',
     ],
   },
   {

packages/backend/api/package.json

@@ -13,11 +13,15 @@
   "dependencies": {
     "@app/backend-shared": "*",
     "@app/shared": "*",
+    "argon2": "^0.41.1",
+    "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "express": "^4.21.2",
+    "jose": "^6.0.10",
     "kysely": "^0.27.6"
   },
   "devDependencies": {
+    "@types/cookie-parser": "^1.4.8",
     "@types/cors": "^2.8.17",
     "@types/express": "^5.0.0",
     "@types/react": "^19.0.12",

packages/backend/api/src/auth/index.ts

@@ -0,0 +1,11 @@
+// import express from 'express';
+
+// import postLoginRouter from './post.login';
+// import postRegisterRouter from './post.register';
+
+// const authRouter = express.Router();
+
+// authRouter.use(postLoginRouter);
+// authRouter.use(postRegisterRouter);
+
+// export default authRouter;

packages/backend/api/src/auth/post.login.ts

@@ -0,0 +1,57 @@
+import argon2 from 'argon2';
+import express from 'express';
+import * as jose from 'jose';
+import { sql } from 'kysely';
+
+import { db } from '@app/backend-shared';
+
+const loginRouter = express.Router();
+
+const FRONTEND_HOST = process.env.FRONTEND_HOST ?? '';
+
+loginRouter.post('/login', async (req, res) => {
+  try {
+    const { email, password } = req.body;
+
+    if (!email || !password) {
+      return res.status(400).json({ error: 'email and password required' });
+    }
+
+    const result = await sql`
+  SELECT * FROM user WHERE user.email = ${email}
+  `.execute(db);
+
+    const user = result.rows[0];
+
+    if (!user) {
+      res.json({ message: 'user or password incorrect' });
+      return;
+    }
+
+    const isPasswordValide = await argon2.verify(user.password, password);
+
+    if (!isPasswordValide) {
+      res.json({ message: 'user or password incorrect' });
+      return;
+    }
+
+    new jose.SignJWT({
+      sub: email,
+    })
+      .setProtectedHeader({
+        alg: 'HS256',
+      })
+      .setIssuedAt()
+      .setIssuer(FRONTEND_HOST)
+      .setAudience(FRONTEND_HOST);
+
+    res.json({
+      message: 'User logged in',
+    });
+  } catch (error) {
+    console.log(error);
+    res.status(400);
+  }
+});
+
+export default loginRouter;

packages/backend/api/src/auth/post.register.ts

@@ -0,0 +1,36 @@
+import argon2 from 'argon2';
+import express from 'express';
+import { sql } from 'kysely';
+
+import { db } from '@app/backend-shared';
+
+const postRegisterRouter = express.Router();
+
+postRegisterRouter.post('/register', async (req, res) => {
+  try {
+    const { email, username, password } = req.body;
+
+    if (!email || !username || !password) {
+      return res.status(400).json({ error: 'All fields are required' });
+    }
+
+    const hashedPassword = await argon2.hash(password);
+
+    await sql`
+    INSERT INTO user(email, username, password) VALUES(${email}, ${username}, ${hashedPassword})
+    `.execute(db);
+
+    res.status(201).json({ message: 'user successfully created' });
+  } catch (error) {
+    console.error('not user created', error);
+    res.status(500).json({ error: 'internal server error' });
+  }
+});
+
+export default postRegisterRouter;
+
+// {
+//   "email":"[email protected]",
+//   "username":"amingo",
+//   "password":"amingo"
+// }

packages/backend/api/src/index.ts

@@ -1,3 +1,4 @@
+import cookieParser from 'cookie-parser';
 import cors from 'cors';
 import express from 'express';
 import path from 'path';
@@ -14,8 +15,17 @@ const app = express();
 const HOST = process.env.BACKEND_HOST ?? 'localhost';
 const PORT = process.env.BACKEND_PORT ?? 3000;
 
+const COOKIE_SECRET = process.env.COOKIE_SECRET ?? 'secret';
+
+app.use(cookieParser(COOKIE_SECRET));
+
 app.use(express.json());
-app.use(cors());
+app.use(
+  cors({
+    origin: `http://${process.env.FRONTEND_HOST}:${process.env.FRONTEND_PORT}`,
+    credentials: true,
+  }),
+);
 app.use(
   '/cdn',
   express.static(

packages/backend/api/src/models/cookie.ts

@@ -0,0 +1,11 @@
+import { db } from '@app/backend-shared';
+
+export default {
+  userCookie() {
+    return db
+      .selectFrom('user')
+      .select(['user.id', 'user.email'])
+      .where('user.id', '=', 1)
+      .executeTakeFirstOrThrow();
+  },
+};

packages/backend/api/src/models/user-login.ts

@@ -0,0 +1,28 @@
+import argon2 from 'argon2';
+
+import { db } from '@app/backend-shared';
+
+export async function userLogin(email: string, password: string) {
+  try {
+    const user = await db
+      .selectFrom('user')
+      .selectAll()
+      .where('user.email', '=', email || 'user.username')
+      .executeTakeFirst();
+
+    if (!user) {
+      return { error: 'Invalid email or password' };
+    }
+
+    const isPasswordValid = await argon2.verify(user.password, password);
+
+    if (!isPasswordValid) {
+      return { error: 'Invalid email or password' };
+    }
+
+    return { message: 'Login successful' };
+  } catch (error) {
+    console.error('Error logging in:', error);
+    throw new Error('Internal server error');
+  }
+}

packages/backend/api/src/models/user-register.ts

@@ -0,0 +1,25 @@
+import argon2 from 'argon2';
+
+import { db } from '@app/backend-shared';
+
+export async function userRegister(
+  email: string,
+  username: string,
+  password: string,
+) {
+  const hashPassword = await argon2.hash(password, {
+    memoryCost: 19456,
+    timeCost: 2,
+    parallelism: 1,
+  });
+
+  return db
+    .insertInto('user')
+    .values({ email, username, password: hashPassword })
+    .executeTakeFirst()
+    .then(() => ({ message: 'User created successfully' }))
+    .catch((error: unknown) => {
+      console.error('Error creating user:', error);
+      throw new Error('Failed to create user');
+    });
+}

packages/backend/api/src/router.ts

@@ -1,5 +1,9 @@
 import express from 'express';
 
+import {
+  default as cookkieRouterGet,
+  default as userLoginRouter,
+} from './subrouters/login-router';
 import postsRouter from './subrouters/posts-router';
 import tagsRouter from './subrouters/tags-router';
 import usersRouter from './subrouters/users-router';
@@ -10,6 +14,10 @@ router.use('/posts', postsRouter);
 router.use('/users', usersRouter);
 router.use('/tags', tagsRouter);
 
+router.use('/login', userLoginRouter);
+router.use('/register', usersRouter);
+router.use('/cookie', cookkieRouterGet);
+
 router.get('*', function (req, res) {
   res.status(404).send(`ressource ${req.path} not found`);
 });

packages/backend/api/src/subrouters/login-router.ts

@@ -0,0 +1,93 @@
+import express from 'express';
+import * as jose from 'jose';
+
+import { env } from '@app/shared';
+
+import { userLogin } from '@/models/user-login';
+
+env();
+
+const userLoginRouter = express.Router();
+
+const cookkieRouterGet = express.Router();
+
+const FRONTEND_HOST = process.env.FRONTEND_HOST ?? '';
+
+const JWT_SECRET = process.env.JWT_SECRET;
+
+const secret = new TextEncoder().encode(JWT_SECRET);
+
+// POST LOGIN**************************************************
+
+userLoginRouter.post('/', async function (req, res) {
+  try {
+    const { email, password } = req.body;
+
+    const userAccess = await userLogin(email, password);
+
+    const token = await new jose.SignJWT({ sub: email })
+      .setProtectedHeader({ alg: 'HS256' })
+      .setIssuedAt()
+      .setIssuer(FRONTEND_HOST)
+      .setAudience(FRONTEND_HOST)
+      .setExpirationTime('2h')
+      .sign(secret);
+
+    res.cookie('token', token, {
+      httpOnly: true,
+      signed: true,
+      // secure: true,
+      // sameSite: 'strict',
+    });
+
+    res.json(userAccess);
+  } catch (error) {
+    if (
+      error instanceof Error &&
+      error.message === 'Invalid email or password'
+    ) {
+      res.status(401).json({ message: error.message });
+    } else {
+      console.error('Error during login:', error);
+      res.status(500).json({ message: 'Internal login server error' });
+    }
+  }
+});
+
+// GET COOKIES **************************************************
+
+cookkieRouterGet.get('/', async function (req, res) {
+  const token = req.signedCookies.token;
+
+  try {
+    const { payload } = await jose.jwtVerify(token, secret, {
+      audience: FRONTEND_HOST,
+      issuer: FRONTEND_HOST,
+    });
+
+    res.json(payload);
+  } catch (error) {
+    console.error(error);
+    res.status(500).json({ message: 'wrong' });
+  }
+});
+
+// GET **************************************************
+
+userLoginRouter.get('/:id', function (req, res) {
+  res.send('login get');
+});
+
+// UPDATE **************************************************
+
+userLoginRouter.put('/', function (req, res) {
+  res.send('login put');
+});
+
+// DELETE **************************************************
+
+userLoginRouter.delete('/:id', function (req, res) {
+  res.send('login delete');
+});
+
+export default userLoginRouter;

packages/backend/api/src/subrouters/users-router.ts

@@ -1,6 +1,6 @@
 import express from 'express';
 
-import postModel from '@/models/post-model';
+import { userRegister } from '@/models/user-register';
 
 const usersRouter = express.Router();
 
@@ -19,6 +19,18 @@ usersRouter.get('/tag/:tag', function () {
 
 // POST **************************************************
 
+usersRouter.post('/', async function (req, res) {
+  try {
+    const { email, username, password } = req.body;
+
+    const result = await userRegister(email, username, password);
+
+    res.json(result);
+  } catch (error) {
+    console.error(error);
+    res.status(500).json({ message: 'Internal register server error' });
+  }
+});
 // UPDATE **************************************************
 
 // DELETE **************************************************

packages/frontend/web/package.json

@@ -28,6 +28,7 @@
     "vite": "^6.2.0"
   },
   "optionalDependencies": {
+    "@rollup/rollup-linux-x64-gnu": "^4.38.0",
     "@rollup/rollup-win32-x64-msvc": "^4.37.0",
     "@tailwindcss/oxide-win32-x64-msvc": "^4.0.17"
   }