48 lines
1.2 KiB
TypeScript
48 lines
1.2 KiB
TypeScript
import type { RequestHandler } from '@sveltejs/kit';
|
|
import { Admin } from '$lib/server/database';
|
|
import { env as publicEnv } from '$env/dynamic/public';
|
|
import { env } from '$env/dynamic/private';
|
|
import { addSession } from '$lib/server/session';
|
|
|
|
export const POST = (async ({ request, cookies }) => {
|
|
const data = await request.formData();
|
|
const username = data.get('username') as string | null;
|
|
const password = data.get('password') as string | null;
|
|
|
|
if (username == null || password == null) {
|
|
return new Response(null, {
|
|
status: 403
|
|
});
|
|
}
|
|
|
|
if (
|
|
env.ADMIN_USER &&
|
|
env.ADMIN_PASSWORD &&
|
|
username == env.ADMIN_USER &&
|
|
password == env.ADMIN_PASSWORD
|
|
) {
|
|
cookies.set('session', addSession(), {
|
|
path: `${publicEnv.PUBLIC_BASE_PATH}/admin`,
|
|
maxAge: 60 * 60 * 24 * 90,
|
|
httpOnly: true,
|
|
secure: true
|
|
});
|
|
return new Response();
|
|
}
|
|
|
|
const user = await Admin.findOne({ where: { username: username } });
|
|
if (user && user.validatePassword(password)) {
|
|
cookies.set('session', addSession(), {
|
|
path: `${publicEnv.PUBLIC_BASE_PATH}/admin`,
|
|
maxAge: 60 * 60 * 24 * 90,
|
|
httpOnly: true,
|
|
secure: true
|
|
});
|
|
return new Response();
|
|
} else {
|
|
return new Response(null, {
|
|
status: 403
|
|
});
|
|
}
|
|
}) satisfies RequestHandler;
|