Method login

backend/src/app.controller.ts:96–145

(
    @Headers('authorization') authHeader: string | undefined,
    @Res({ passthrough: true }) res: Response,
  )

  @Public()
  @Post('/auth/login')
  login(
    @Headers('authorization') authHeader: string | undefined,
    @Res({ passthrough: true }) res: Response,
  ) {
    // Only for local auth provider
    if (this.authCfg.provider !== 'local') {
      throw new UnauthorizedException('Login endpoint only available for local auth');
    }

    // Validate Basic auth header
    if (!authHeader || !authHeader.startsWith('Basic ')) {
      throw new UnauthorizedException('Missing Basic Auth credentials');
    }

    const base64Credentials = authHeader.slice(6);
    let username: string;
    let password: string;

    try {
      const credentials = Buffer.from(base64Credentials, 'base64').toString('utf-8');
      [username, password] = credentials.split(':');
    } catch {
      throw new UnauthorizedException('Invalid Basic Auth format');
    }

    if (!username || !password) {
      throw new UnauthorizedException('Invalid Basic Auth format');
    }

    // Validate credentials
    if (
      username !== this.authCfg.local.adminUsername ||
      password !== this.authCfg.local.adminPassword
    ) {
      throw new UnauthorizedException('Invalid admin credentials');
    }

    // Create session token and set cookie
    const sessionToken = createSessionToken(username);

    res.cookie(SESSION_COOKIE_NAME, sessionToken, {
      httpOnly: true,
      secure: process.env.NODE_ENV === 'production',
      sameSite: 'lax',
      maxAge: SESSION_COOKIE_MAX_AGE,
      path: '/',
    });

    return { success: true, message: 'Logged in successfully' };
  }

  /**
   * Logout endpoint for local auth.