Function handleLoginSubmit

telemetry-dashboard/src/index.ts:167–201

(env: Env, request: Request)

}

async function handleLoginSubmit(env: Env, request: Request): Promise<Response> {
  if (!isSameOriginPost(request)) {
    return new Response('bad request\n', { status: 400 });
  }

  const contentLength = Number(request.headers.get('content-length'));
  if (Number.isFinite(contentLength) && contentLength > MAX_LOGIN_BODY_BYTES) {
    return new Response('payload too large\n', { status: 413 });
  }

  let form: FormData;
  try {
    form = await request.formData();
  } catch {
    return new Response('bad request\n', { status: 400 });
  }

  const next = safeNextPath(String(form.get('next') ?? '/'));
  const password = form.get('password');
  const styleNonce = nonce();
  const fail = (error: string, status: number): Response =>
    html(renderLoginPage({ next, error, nonce: styleNonce }), { status, nonce: styleNonce });

  if (!(await loginRateLimitOk(env, request))) {
    return fail('Too many attempts. Wait a minute and try again.', 429);
  }
  if (typeof password !== 'string' || password.length === 0) {
    return fail('Enter the password to continue.', 400);
  }
  if (!(await checkPassword(env, password))) {
    return fail('That password is not right.', 401);
  }

  return redirect(next, { headers: { 'set-cookie': sessionCookie(await issueSession(env)) } });
}

/**
 * The chart endpoints live in src/api.ts and return data, not responses, so this