Method handleSetup

packages/memos-core/src/viewer/server.ts:426–453

(req: http.IncomingMessage, res: http.ServerResponse)

  // ─── Auth endpoints ───

  private handleSetup(req: http.IncomingMessage, res: http.ServerResponse): void {
    if (!this.needsSetup) {
      res.writeHead(400, { "Content-Type": "application/json" });
      res.end(JSON.stringify({ error: "Password already set" }));
      return;
    }
    this.readBody(req, (body) => {
      try {
        const { password } = JSON.parse(body);
        if (!password || password.length < 4) {
          res.writeHead(400, { "Content-Type": "application/json" });
          res.end(JSON.stringify({ error: "Password must be at least 4 characters" }));
          return;
        }
        this.auth.passwordHash = this.hashPassword(password);
        this.saveAuth();
        const token = this.createSession();
        res.writeHead(200, {
          "Content-Type": "application/json",
          "Set-Cookie": `${this.cookieName}=${token}; Path=/; HttpOnly; SameSite=Strict; Max-Age=86400`,
        });
        res.end(JSON.stringify({ ok: true, message: "Password set successfully" }));
      } catch (err) {
        res.writeHead(400, { "Content-Type": "application/json" });
        res.end(JSON.stringify({ error: String(err) }));
      }
    });
  }

  private handleLogin(req: http.IncomingMessage, res: http.ServerResponse): void {
    this.readBody(req, (body) => {