Function login

apps/app-server/src/trpc/api/sessions/login.ts:62–243

({
  ctx,
  input,
}: InferProcedureOpts<typeof baseProcedure>)

export const loginProcedure = once(() => baseProcedure.mutation(login));

export async function login({
  ctx,
  input,
}: InferProcedureOpts<typeof baseProcedure>) {
  return await ctx.dataAbstraction.transaction(async (dtrx) => {
    // Check for excessive failed login attempts

    const failedLoginAttempts = await _checkFailedLoginAttempts({
      redis: ctx.redis,

      ip: ctx.req.ip,
      email: input.email,
    });

    if (failedLoginAttempts.excessive) {
      throw new TRPCError({
        message: `Too many failed login attempts. Try again in ${failedLoginAttempts.loginBlockTTL} minutes.`,
        code: 'TOO_MANY_REQUESTS',
      });
    }

    // Get user data

    const user = await UserModel.query()
      .where('email_hash', Buffer.from(hashUserEmail(input.email)))
      .where((builder) =>
        builder
          .where('email_verified', true)
          .orWhere('email_verification_expiration_date', '>', new Date()),
      )
      .select(
        'users.id',

        'users.email_verified',
        'users.email_verification_code',

        'users.encrypted_rehashed_login_hash',

        'users.public_keyring',
        'users.encrypted_private_keyring',
        'users.encrypted_symmetric_keyring',

        'users.two_factor_auth_enabled',
        'users.encrypted_authenticator_secret',
        'users.encrypted_recovery_codes',

        'users.personal_group_id',
      )
      .first();

    if (user == null) {
      await _incrementFailedLoginAttempts({
        redis: ctx.redis,

        ip: ctx.req.ip,
        email: input.email,
      });