spchcap/speech.capital
1
0
Fork 0
mirror of https://github.com/spchcap/speech.capital.git synced 2026-01-14 16:48:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Feat: Set auth cookies with username and pass_hash

Browse Source
This commit is contained in:
multipleof4
2025-10-02 11:15:14 -07:00
parent 301364400a
commit 59498ccb1e
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
functions/api/login.js
View File

@@ -9,14 +9,13 @@ export async function onRequestPost({ request, env }) {
const user = await env.D1_SPCHCAP.prepare('SELECT id, pass_hash FROM users WHERE username = ?').bind(username).first();
if (!user || !tsEq(user.pass_hash, pass_hash)) return json({ error: 'Invalid credentials' }, { status: 401 });
const sid = crypto.randomUUID();
const exp = new Date(Date.now() + 2592e6); // 30 days
const opts = `Domain=.speech.capital; Path=/; Expires=${exp.toUTCString()}; HttpOnly; Secure; SameSite=Strict`;
const headers = new Headers();
headers.append('Set-Cookie', `auth_user=${username}; ${opts}`);
headers.append('Set-Cookie', `auth_hash=${user.pass_hash}; ${opts}`);
await env.D1_SPCHCAP.prepare('INSERT INTO sessions (id, user_id, expires_at) VALUES (?, ?, ?)')
.bind(sid, user.id, exp.toISOString().slice(0, 19).replace('T', ' ')).run();
const cookie = `session_id=${sid}; Domain=.speech.capital; Path=/; Expires=${exp.toUTCString()}; HttpOnly; Secure; SameSite=Strict`;
return json({ success: true }, { headers: { 'Set-Cookie': cookie } });
return json({ success: true }, { headers });
} catch (e) {
return json({ error: { message: e.message } }, { status: 500 });
}