TofuStack/src/lib/server/api/controllers/iam.controller.ts

import { inject, injectable } from 'tsyringe';
import { ControllerProvider } from '../providers';
import { zValidator } from '@hono/zod-validator';
import { registerEmailDto } from '../dtos/register-email.dto';
import { IamService } from '../services/iam.service';
import { signInEmailDto } from '../dtos/signin-email.dto';
import { setCookie } from 'hono/cookie';
import { LuciaProvider } from '../providers/lucia.provider';
import { requireAuth } from '../middleware/require-auth.middleware';
import { updateEmailDto } from '../dtos/update-email.dto';
import { verifyEmailDto } from '../dtos/verify-email.dto';

@injectable()
export class IamController {
	constructor(
		@inject(ControllerProvider) private controller: ControllerProvider,
		@inject(IamService) private iamService: IamService,
		@inject(LuciaProvider) private lucia: LuciaProvider
	) {}

	getAuthedUser() {
		return this.controller.get('/user', async (c) => {
			const user = c.var.user;
			return c.json({ user: user });
		});
	}

	registerEmail() {
		return this.controller.post(
			'/email/register',
			zValidator('json', registerEmailDto),
			async (c) => {
				const { email } = c.req.valid('json');
				await this.iamService.registerEmail({ email });
				return c.json({ message: 'Verification email sent' });
			}
		);
	}

	signInEmail() {
		return this.controller.post('/email/signin', zValidator('json', signInEmailDto), async (c) => {
			const { email, token } = c.req.valid('json');
			const session = await this.iamService.signinEmail({ email, token });
			const sessionCookie = this.lucia.createSessionCookie(session.id);
			setCookie(c, sessionCookie.name, sessionCookie.value, {
				path: sessionCookie.attributes.path,
				maxAge: sessionCookie.attributes.maxAge,
				domain: sessionCookie.attributes.domain,
				sameSite: sessionCookie.attributes.sameSite as any,
				secure: sessionCookie.attributes.secure,
				httpOnly: sessionCookie.attributes.httpOnly,
				expires: sessionCookie.attributes.expires
			});
			return c.json({ message: 'ok' });
		});
	}

	logout() {
		return this.controller.post('/logout', requireAuth, async (c) => {
			const sessionId = c.var.session.id;
			await this.iamService.logout(sessionId);
			const sessionCookie = this.lucia.createBlankSessionCookie();
			setCookie(c, sessionCookie.name, sessionCookie.value, {
				path: sessionCookie.attributes.path,
				maxAge: sessionCookie.attributes.maxAge,
				domain: sessionCookie.attributes.domain,
				sameSite: sessionCookie.attributes.sameSite as any,
				secure: sessionCookie.attributes.secure,
				httpOnly: sessionCookie.attributes.httpOnly,
				expires: sessionCookie.attributes.expires
			});
			return c.json({ status: 'success' });
		});
	}

	updateEmail() {
		return this.controller.post(
			'/email/update',
			requireAuth,
			zValidator('json', updateEmailDto),
			async (c) => {
				const json = c.req.valid('json');
				await this.iamService.updateEmail(c.var.user.id, json);
				return c.json({ message: 'Verification email sent' });
			}
		);
	}

	verifyEmail() {
		return this.controller.post(
			'/email/verify',
			requireAuth,
			zValidator('json', verifyEmailDto),
			async (c) => {
				const json = c.req.valid('json');
				await this.iamService.verifyEmail(c.var.user.id, json.token);
				return c.json({ message: 'Verified and updated' });
			}
		);
	}
}