Function post

pages/login.tsx:74–175

({ request, match, user, session, isRunningLocally }: RequestHandlerParams)

}

async function post({ request, match, user, session, isRunningLocally }: RequestHandlerParams) {
  if (user) {
    return new Response('Redirect', { status: 303, headers: { 'Location': `/` } });
  }

  const isEmailVerificationEnabled = await AppConfig.isEmailVerificationEnabled();
  const isMultiFactorAuthEnabled = await AppConfig.isMultiFactorAuthEnabled() && await UserModel.isThereAnAdmin();
  const isSingleSignOnEnabled = await AppConfig.isSingleSignOnEnabled();
  const config = await AppConfig.getConfig();
  const helpEmail = config.visuals.helpEmail;

  const singleSignOnUrl = isSingleSignOnEnabled
    ? (await OidcModel.getSignInUrl({ requestPermissions: config.auth.singleSignOnScopes }))
    : undefined;

  const searchParams = new URL(request.url).searchParams;

  const formData = await request.clone().formData();
  const email = getFormDataField(formData, 'email');

  const redirectUrl = searchParams.get('redirect') || '/';

  let errorMessage: string | undefined = undefined;

  try {
    if (!validateEmail(email)) {
      throw new Error(`Invalid email.`);
    }

    const password = getFormDataField(formData, 'password');

    if (password.length < 6) {
      throw new Error(`Password is too short.`);
    }

    const hashedPassword = await generateHash(`${password}:${PASSWORD_SALT}`, 'SHA-256');

    const user = await UserModel.getByEmail(email);

    if (!user || user.hashed_password !== hashedPassword) {
      throw new Error('Email not found or invalid password.');
    }

    const isEmailVerificationEnabled = await AppConfig.isEmailVerificationEnabled();

    if (!isEmailVerificationEnabled && !user.extra.is_email_verified) {
      user.extra.is_email_verified = true;

      await UserModel.update(user);
    }

    if (!user.extra.is_email_verified) {
      const code = getFormDataField(formData, 'verification-code');

      if (!code) {
        const verificationCode = await VerificationCodeModel.create(user, user.email, 'email');

        await EmailModel.sendVerificationEmail(user.email, verificationCode);