boredgame/src/routes/(auth)/login/+page.server.ts

import { fail, type Actions } from '@sveltejs/kit';
import { eq, or } from 'drizzle-orm';
import { Argon2id } from 'oslo/password';
import { zod } from 'sveltekit-superforms/adapters';
import { setError, superValidate } from 'sveltekit-superforms/server';
import { redirect } from 'sveltekit-flash-message/server';
import { db } from '../../../lib/server/api/infrastructure/database/index';
import { lucia } from '../../../lib/server/api/infrastructure/auth/lucia';
import { credentialsTable, usersTable } from '../../../lib/server/api/infrastructure/database/tables';
import type { PageServerLoad } from './$types';
import {signinUsernameDto} from "$lib/dtos/signin-username.dto";

export const load: PageServerLoad = async (event) => {
	const { locals } = event;

	const authedUser = await locals.getAuthedUser();

	if (authedUser) {
		const message = { type: 'success', message: 'You are already signed in' } as const;
		throw redirect('/', message, event);
	}

	// if (userFullyAuthenticated(user, session)) {
	// 	const message = { type: 'success', message: 'You are already signed in' } as const;
	// 	throw redirect('/', message, event);
	// } else if (userNotFullyAuthenticated(user, session)) {
	// 	await lucia.invalidateSession(locals.session!.id!);
	// 	const sessionCookie = lucia.createBlankSessionCookie();
	// 	cookies.set(sessionCookie.name, sessionCookie.value, {
	// 		path: '.',
	// 		...sessionCookie.attributes,
	// 	});
	// }
	const form = await superValidate(event, zod(signinUsernameDto));

	return {
		form,
	};
};

export const actions: Actions = {
	default: async (event) => {
		const { locals } = event;

		const authedUser = await locals.getAuthedUser();

		if (authedUser) {
			const message = { type: 'success', message: 'You are already signed in' } as const;
			throw redirect('/', message, event);
		}

		const form = await superValidate(event, zod(signinUsernameDto));

		const { error } = await locals.api.login.$post({ json: form.data }).then(locals.parseApiResponse);
		if (error) return setError(form, 'username', error);

		if (!form.valid) {
			form.data.password = '';
			return fail(400, {
				form,
			});
		}

		// let session;
		// let sessionCookie;
		// const user: Users | undefined = await db.query.usersTable.findFirst({
		// 	where: or(eq(usersTable.username, form.data.username), eq(usersTable.email, form.data.username)),
		// });
		//
		// if (!user) {
		// 	form.data.password = '';
		// 	return setError(form, 'username', 'Your username or password is incorrect.');
		// }
		//
		// let twoFactorDetails;
		//
		try {
		// 	const password = form.data.password;
		// 	console.log('user', JSON.stringify(user, null, 2));
		//
		// 	if (!user?.hashed_password) {
		// 		console.log('invalid username/password');
		// 		form.data.password = '';
		// 		return setError(form, 'password', 'Your username or password is incorrect.');
		// 	}
		//
		// 	const validPassword = await new Argon2id().verify(user.hashed_password, password);
		// 	if (!validPassword) {
		// 		console.log('invalid password');
		// 		form.data.password = '';
		// 		return setError(form, 'password', 'Your username or password is incorrect.');
		// 	}
		//
		// 	console.log('ip', locals.ip);
		// 	console.log('country', locals.country);
		//
		// 	twoFactorDetails = await db.query.twoFactor.findFirst({
		// 		where: eq(twoFactor.userId, user?.id),
		// 	});
		//
		// 	if (twoFactorDetails?.secret && twoFactorDetails?.enabled) {
		// 		await db.update(twoFactor).set({
		// 			initiatedTime: new Date(),
		// 		});
		//
		// 		session = await lucia.createSession(user.id, {
		// 			ip_country: locals.country,
		// 			ip_address: locals.ip,
		// 			twoFactorAuthEnabled:
		// 				twoFactorDetails?.enabled &&
		// 				twoFactorDetails?.secret !== null &&
		// 				twoFactorDetails?.secret !== '',
		// 			isTwoFactorAuthenticated: false,
		// 		});
		// 	} else {
		// 		session = await lucia.createSession(user.id, {
		// 			ip_country: locals.country,
		// 			ip_address: locals.ip,
		// 			twoFactorAuthEnabled: false,
		// 			isTwoFactorAuthenticated: false,
		// 		});
		// 	}
		// 	console.log('logging in session', session);
		// 	sessionCookie = lucia.createSessionCookie(session.id);
		// 	console.log('logging in session cookie', sessionCookie);
		} catch (e) {
			// TODO: need to return error message to the client
			console.error(e);
			form.data.password = '';
			return setError(form, '', 'Your username or password is incorrect.');
		}

		// console.log('setting session cookie', sessionCookie);
		// event.cookies.set(sessionCookie.name, sessionCookie.value, {
		// 	path: '.',
		// 	...sessionCookie.attributes,
		// });

		form.data.username = '';
		form.data.password = '';

		// if (
		// 	twoFactorDetails?.enabled &&
		// 	twoFactorDetails?.secret !== null &&
		// 	twoFactorDetails?.secret !== ''
		// ) {
		// 	console.log('redirecting to TOTP page');
		// 	const message = { type: 'success', message: 'Please enter your TOTP code.' } as const;
		// 	redirect(302, '/totp', message, event);
		// } else {
		// 	const message = { type: 'success', message: 'Signed In!' } as const;
		// 	redirect(302, '/', message, event);
		// }
	},
};