first commit

1 files changed, 117 insertions, 0 deletions

diff --git a/src/controller/auth.ts b/src/controller/auth.ts
new file mode 100644
index 0000000..13196fb
--- /dev/null
+++ b/src/controller/auth.ts
@@ -0,0 +1,117 @@
+/* Financer - Pocket Money Tracker
+ * Copyright (C) 2025  Vidhu Kant Sharma <vidhukant@vidhukant.com>
+
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { Request, Response } from "express";
+import bcrypt from "bcrypt";
+
+import { create, readByEmail, readById } from "../service/user";
+import { getAccessToken, getRefreshToken, verifyRefreshToken } from "../util/auth";
+
+const signup = async (req: Request, res: Response) => {
+    bcrypt.hash(req.body.password, 10, async (err, hash) => {
+        try {
+            if (err != undefined) {
+                res.status(500).json({ error: "Internal Server Error" });
+                console.error(err);
+            }
+
+            const user = await create({
+                ...req.body,
+                "password": hash,
+            });
+
+            // @ts-ignore
+            delete user["password"];
+            // @ts-ignore
+            delete user["refreshTokenVersion"]
+
+            res.status(201).json({
+                user: user,
+                accessToken: getAccessToken(user.id),
+                refreshToken: getRefreshToken(user.id, user.refreshTokenVersion)
+            });
+        } catch (error) {
+            res.status(500).json({ error: "Internal Server Error" });
+            console.error(error);
+        }
+    });
+}
+
+const login = async (req: Request, res: Response) => {
+    try {
+        const user = await readByEmail(req.body.email);
+
+        bcrypt.compare(req.body.password, user.password, (err, isMatch) => {
+            if (err != undefined) {
+                res.status(500).json({ error: "Internal Server Error" });
+                console.error(err);
+            }
+
+            if (isMatch) {
+                // @ts-ignore
+                delete user["password"];
+                // @ts-ignore
+                delete user["refreshTokenVersion"]
+
+                res.status(200).json({
+                    user: user,
+                    accessToken: getAccessToken(user.id),
+                    refreshToken: getRefreshToken(user.id, user.refreshTokenVersion)
+                });
+            } else {
+                res.status(400).json({ error: "Invalid Credentials" });
+            }
+        })
+    } catch (error) {
+        res.status(500).json({ error: "Internal Server Error" });
+        console.error(error);
+    }
+}
+
+const refresh = async (req: Request, res: Response) => {
+    try {
+        const claims = verifyRefreshToken(req.body.refreshToken);
+        const user = await readById(claims.userId);
+
+        if (!user) {
+            res.status(404).json({ error: "Not Found" })
+        } else {
+            // @ts-ignore
+            if (claims.version == user.refreshTokenVersion) {
+                // @ts-ignore
+                res.status(200).json({ accessToken: getAccessToken(user.id), refreshToken: getRefreshToken(user.id, user.refreshTokenVersion) });
+            } else {
+                res.status(401).json({ error: "Session Expired" })
+            }
+        }
+    } catch (error) {
+        // @ts-ignore
+        switch (error.message) {
+            case "invalid signature":
+                res.status(401).json({ error: "Invalid Credentials" });
+                break;
+            case "jwt expired":
+                res.status(401).json({ error: "Token Expired" });
+                break;
+            default:
+                res.status(500).json({ error: "Internal Server Error" });
+                console.error(error);
+        }
+    }
+}
+
+export { login, signup, refresh };
\ No newline at end of file