Function getLoginStatus

freebuff/web/src/app/api/auth/cli/status/_get.ts:24–101

({
  req,
  db,
  logger,
  secret,
  now = Date.now,
}: GetLoginStatusDeps)

})

export async function getLoginStatus({
  req,
  db,
  logger,
  secret,
  now = Date.now,
}: GetLoginStatusDeps): Promise<NextResponse> {
  const { searchParams } = new URL(req.url)
  const result = reqSchema.safeParse({
    fingerprintId: searchParams.get('fingerprintId'),
    fingerprintHash: searchParams.get('fingerprintHash'),
    expiresAt: searchParams.get('expiresAt'),
  })
  if (!result.success) {
    return NextResponse.json(
      { error: 'Invalid query parameters' },
      { status: 400 },
    )
  }

  const { fingerprintId, fingerprintHash, expiresAt } = result.data

  if (now() > expiresAt) {
    logger.info(
      { fingerprintId, fingerprintHash, expiresAt },
      'Auth code expired',
    )
    return NextResponse.json(
      { error: 'Authentication failed' },
      { status: 401 },
    )
  }

  const expectedHash = genAuthCode(fingerprintId, expiresAt.toString(), secret)
  if (fingerprintHash !== expectedHash) {
    logger.info(
      { fingerprintId, fingerprintHash, expectedHash },
      'Invalid auth code',
    )
    return NextResponse.json(
      { error: 'Authentication failed' },
      { status: 401 },
    )
  }

  try {
    const user = await db.getCliSessionForAuth(fingerprintId, fingerprintHash)

    if (!user) {
      logger.info(
        { fingerprintId, fingerprintHash },
        'No active CLI session found for login auth code',
      )
      return NextResponse.json(
        { error: 'Authentication failed' },
        { status: 401 },
      )
    }