Feature/login formular

.gitignore

@@ -56,4 +56,5 @@ web-build/
 *-mock.*
 deployment/db/
 *-mock.*
-test.js
+test.js
+**/*.tsbuildinfo

.prettierignore

@@ -11,3 +11,4 @@ packages/frontend/mobile/ios
 packages/frontend/mobile/android
 deployment/mysql/data
 **/types/database.ts
+**/*.tsbuildinfo

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "Devdb.colorTheme": "dark"
+}

eslint.config.mjs

@@ -40,6 +40,7 @@ export default typescriptPlugin.config([
       'packages/frontend/mobile/ios',
       'packages/frontend/mobile/android',
       'deployment/mysql/data',
+      '**/*.tsbuildinfo',
     ],
   },
   {

packages/backend/api/package.json

@@ -13,13 +13,17 @@
   "dependencies": {
     "@app/backend-shared": "*",
     "@app/shared": "*",
+    "argon2": "^0.41.1",
+    "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "express": "^4.21.2",
+    "jose": "^6.0.10",
     "express-fileupload": "^1.5.1",
     "kysely": "^0.27.6",
     "sharp": "^0.34.1"
   },
   "devDependencies": {
+    "@types/cookie-parser": "^1.4.8",
     "@types/cors": "^2.8.17",
     "@types/express": "^5.0.0",
     "@types/express-fileupload": "^1.5.1",

packages/backend/api/src/index.ts

@@ -1,3 +1,6 @@
+/* eslint-disable @typescript-eslint/consistent-type-definitions */
+/* eslint-disable @typescript-eslint/no-namespace */
+import cookieParser from 'cookie-parser';
 import cors from 'cors';
 import express from 'express';
 import fileUpload from 'express-fileupload';
@@ -15,8 +18,18 @@ const app = express();
 const HOST = process.env.BACKEND_HOST ?? 'localhost';
 const PORT = process.env.BACKEND_PORT ?? 3000;
 
+const COOKIE_SECRET = process.env.COOKIE_SECRET ?? 'secret';
+
+app.use(cookieParser(COOKIE_SECRET));
+
 app.use(express.json());
-app.use(cors());
+app.use(
+  cors({
+    origin: `http://${process.env.FRONTEND_HOST}:${process.env.FRONTEND_PORT}`,
+    credentials: true,
+  }),
+);
+
 app.use(fileUpload());
 app.use(
   '/cdn',
@@ -32,5 +45,14 @@ app.listen(PORT, () => {
   console.log(`Server is listening on http://${HOST}:${PORT}`);
 });
 
-export default app;
 export type * from './models/model-types';
+export default app;
+
+declare global {
+  namespace Express {
+    interface Request {
+      isAuthenticated?: boolean;
+      userId?: number;
+    }
+  }
+}

packages/backend/api/src/middlewares/login.guards.ts

@@ -0,0 +1,17 @@
+import type { NextFunction, Request, Response } from 'express';
+
+export default function loginGuards(
+  req: Request,
+  res: Response,
+  next: NextFunction,
+) {
+  if (req.isAuthenticated === true) {
+    next();
+    return;
+  }
+
+  res.json({
+    ok: false,
+  });
+  return;
+}

packages/backend/api/src/middlewares/login.middleware.ts

@@ -0,0 +1,46 @@
+import type { NextFunction, Request, Response } from 'express';
+import * as jose from 'jose';
+
+const FRONTEND_HOST = process.env.FRONTEND_HOST ?? '';
+
+const JWT_SECRET = process.env.JWT_SECRET;
+
+const secret = new TextEncoder().encode(JWT_SECRET);
+
+export default async function loginMiddleware(
+  req: Request,
+  res: Response,
+  next: NextFunction,
+) {
+  const token = req.signedCookies.token;
+
+  if (!token) {
+    console.error('Token is missing in signed cookies');
+    res.status(401).json({ ok: false, message: 'Token is missing' });
+    return;
+  }
+
+  try {
+    const { payload } = await jose.jwtVerify<{ userId: number }>(
+      token,
+      secret,
+      {
+        audience: FRONTEND_HOST,
+        issuer: FRONTEND_HOST,
+      },
+    );
+
+    console.log('Payload:', payload);
+
+    req.isAuthenticated = true;
+    req.userId = payload.userId;
+  } catch (error) {
+    console.error(error);
+    res.json({
+      ok: false,
+    });
+    return;
+  }
+
+  next();
+}

packages/backend/api/src/models/user-cookie.ts

@@ -0,0 +1,14 @@
+import { db } from '@app/backend-shared';
+
+export default async function userCookie(userId: number) {
+  try {
+    return await db
+      .selectFrom('user')
+      .select(['user.id', 'user.email'])
+      .where('user.id', '=', userId)
+      .executeTakeFirstOrThrow();
+  } catch (error) {
+    console.error('Error in userCookie:', error);
+    throw new Error('Failed to fetch user from database');
+  }
+}

packages/backend/api/src/models/user-login.ts

@@ -0,0 +1,32 @@
+import argon2 from 'argon2';
+
+import { db } from '@app/backend-shared';
+
+export async function userLogin(email: string, password: string) {
+  try {
+    const user = await db
+      .selectFrom('user')
+      .select(['user.id', 'user.password', 'user.email'])
+      .where('user.email', '=', email || 'user.username ')
+      .executeTakeFirst();
+
+    if (!user) {
+      return { error: 'Invalid email or password' };
+    }
+
+    const isPasswordValid = await argon2.verify(user.password, password);
+
+    if (!isPasswordValid) {
+      return { error: 'Invalid email or password' };
+    }
+
+    return {
+      message: 'Login successful',
+      userId: user.id,
+      email: user.email,
+    };
+  } catch (error) {
+    console.error('Error logging in:', error);
+    throw new Error('Internal server error');
+  }
+}

packages/backend/api/src/models/user-register.ts

@@ -0,0 +1,25 @@
+import argon2 from 'argon2';
+
+import { db } from '@app/backend-shared';
+
+export async function userRegister(
+  email: string,
+  username: string,
+  password: string,
+) {
+  const hashPassword = await argon2.hash(password, {
+    memoryCost: 19456,
+    timeCost: 2,
+    parallelism: 1,
+  });
+
+  return db
+    .insertInto('user')
+    .values({ email, username, password: hashPassword })
+    .executeTakeFirst()
+    .then(() => ({ message: 'User created successfully' }))
+    .catch((error: unknown) => {
+      console.error('Error creating user:', error);
+      throw new Error('Failed to create user');
+    });
+}

packages/backend/api/src/router.ts

@@ -1,15 +1,31 @@
 import express from 'express';
 
+import loginGuards from './middlewares/login.guards';
+import loginMiddleware from './middlewares/login.middleware';
+import userLoginRouter, { cookkieRouterGet } from './subrouters/login-router';
+import userLogout from './subrouters/logout-router';
 import postsRouter from './subrouters/posts-router';
 import tagsRouter from './subrouters/tags-router';
 import usersRouter from './subrouters/users-router';
 
 const router = express.Router();
 
+router.use('/register', usersRouter);
+
+router.use('/login', userLoginRouter);
+router.use('/logout', userLogout);
+
+// Middleware to check if the user is authenticated
+router.use(loginMiddleware);
+
+//login guards il faudra mettre mettre toutes les routes qui necessitent d'etre authentifié
+router.use(loginGuards);
 router.use('/posts', postsRouter);
 router.use('/tags', tagsRouter);
 router.use('/users', usersRouter);
 
+router.use('/cookie', cookkieRouterGet);
+
 router.get('*', function (req, res) {
   res.status(404).send(`ressource ${req.path} not found`);
 });

packages/backend/api/src/subrouters/login-router.ts

@@ -0,0 +1,111 @@
+import express from 'express';
+import * as jose from 'jose';
+
+import { db } from '@app/backend-shared';
+import { env } from '@app/shared';
+
+import loginGuards from '@/middlewares/login.guards';
+import { userLogin } from '@/models/user-login';
+
+env();
+
+const userLoginRouter = express.Router();
+
+export const cookkieRouterGet = express.Router();
+
+const FRONTEND_HOST = process.env.FRONTEND_HOST ?? '';
+
+const JWT_SECRET = process.env.JWT_SECRET;
+
+const secret = new TextEncoder().encode(JWT_SECRET);
+
+// POST LOGIN**************************************************
+
+userLoginRouter.post('/', async function (req, res) {
+  try {
+    const { email, password } = req.body;
+
+    const userAccess = await userLogin(email, password);
+
+    const token = await new jose.SignJWT({
+      sub: email,
+      userId: userAccess.userId,
+    })
+      .setProtectedHeader({ alg: 'HS256' })
+      .setIssuedAt()
+      .setIssuer(FRONTEND_HOST)
+      .setAudience(FRONTEND_HOST)
+      .setExpirationTime('60s')
+      .sign(secret);
+
+    res.cookie('token', token, {
+      httpOnly: true,
+      signed: true,
+      // secure: true,
+      // sameSite: 'strict',
+    });
+
+    res.json(userAccess);
+  } catch (error) {
+    if (
+      error instanceof Error &&
+      error.message === 'Invalid email or password'
+    ) {
+      res.status(401).json({ message: error.message });
+    } else {
+      console.error('Error during login:', error);
+      res.status(500).json({ message: 'Internal login server error' });
+    }
+  }
+});
+
+// GET COOKIES **************************************************
+
+cookkieRouterGet.get('/', loginGuards, async function (req, res) {
+  const userId = req.userId;
+
+  if (userId === undefined) {
+    res.json({ ok: 'false' });
+    return;
+  }
+
+  try {
+    const user = await db
+      .selectFrom('user')
+      .selectAll()
+      .where('user.id', '=', userId)
+      .executeTakeFirst();
+
+    if (!user) {
+      res.json({ ok: 'false' });
+      return;
+    }
+    res.json({ user, ok: 'true' });
+  } catch (error) {
+    console.error(error);
+    res.json(
+      'not authorized, please login to get your token or check your cookies',
+    );
+    return;
+  }
+});
+
+// GET **************************************************
+
+userLoginRouter.get('/:id', function (req, res) {
+  res.send('login get');
+});
+
+// UPDATE **************************************************
+
+userLoginRouter.put('/', function (req, res) {
+  res.send('login put');
+});
+
+// DELETE **************************************************
+
+userLoginRouter.delete('/:id', function (req, res) {
+  res.send('login delete');
+});
+
+export default userLoginRouter;

packages/backend/api/src/subrouters/logout-router.ts

@@ -0,0 +1,16 @@
+// POST LOGOUT**************************************************
+import express from 'express';
+
+const userLogout = express.Router();
+
+userLogout.post('/', function (req, res) {
+  try {
+    res.clearCookie('token');
+    res.json({ ok: true });
+  } catch (error) {
+    console.error('Error during logout:', error);
+    res.status(500).json({ message: 'Internal logout server error' });
+  }
+});
+
+export default userLogout;