Isuru Bimsara
133 lines
3.6 KiB
JavaScript
133 lines
3.6 KiB
JavaScript
/**
|
|
* Copyright (c) 2026 Niolla
|
|
* All rights reserved.
|
|
*
|
|
* This source code is proprietary and confidential.
|
|
* Unauthorized copying, modification, distribution, or use
|
|
* of this file, via any medium, is strictly prohibited.
|
|
*/
|
|
|
|
// app/controllers/auth.controller.js
|
|
|
|
const { checkPassword } = require("../utils/hashPassword.util");
|
|
const { sendMail } = require("../utils/mail.util");
|
|
const { generateOTP, validateOTP } = require("../utils/otp.util");
|
|
const {getCachedUser,clearUserCache} = require("../utils/cache.util");
|
|
const { generateToken } = require("../utils/jwt.util");
|
|
const { log } = require("../utils/consoleLog.utill");
|
|
|
|
const appName = process.env.APP_NAME || "Niolla";
|
|
|
|
// Login Step 1: Request OTP
|
|
exports.loginReq = async (req, res) => {
|
|
try {
|
|
const { email, password } = req.body;
|
|
|
|
const user = await getCachedUser(email);
|
|
if (!user) {
|
|
return res
|
|
.status(404)
|
|
.send({ success: false, message: "User Not Found" });
|
|
}
|
|
|
|
const passwordIsValid = await checkPassword(password, user.password);
|
|
if (!passwordIsValid) {
|
|
return res
|
|
.status(401)
|
|
.send({ success: false, message: "Invalid Password" });
|
|
}
|
|
|
|
const otp = generateOTP(email);
|
|
|
|
await sendMail({
|
|
to: email,
|
|
subject: `OTP for Your ${appName} Account`,
|
|
templateName: "otp",
|
|
templateVars: {
|
|
firstName: user.firstName,
|
|
otp: otp,
|
|
},
|
|
text: `Hello ${user.firstName}, your otp is ${otp}`,
|
|
});
|
|
|
|
log(`OTP for ${email}: ${otp}`);
|
|
log(`OTP sent to ${email} successfully.`);
|
|
|
|
res.status(201).send({ success: true, message: "OTP Sent Successfully" });
|
|
} catch (error) {
|
|
log("Error occurred while sending OTP:", error);
|
|
res.status(500).send({ success: false, message: error.message });
|
|
}
|
|
};
|
|
|
|
// Login Step 2: Verify OTP and issue JWT
|
|
exports.login = async (req, res) => {
|
|
try {
|
|
const { email, otp } = req.body;
|
|
|
|
const user = await getCachedUser(email);
|
|
|
|
if (!user) {
|
|
return res
|
|
.status(404)
|
|
.send({ success: false, message: "User Not Found" });
|
|
}
|
|
|
|
const isValidOTP = validateOTP(email, otp);
|
|
|
|
if (!isValidOTP) {
|
|
return res
|
|
.status(401)
|
|
.send({ success: false, message: "Invalid or Expired OTP" });
|
|
}
|
|
|
|
// Generate JWT token
|
|
const token = generateToken({
|
|
id: user.id,
|
|
firstName: user.firstName,
|
|
lastName: user.lastName,
|
|
email: user.email,
|
|
role: user.role,
|
|
accountType: user.accountType,
|
|
});
|
|
|
|
// 3. Set JWT as HttpOnly cookie
|
|
res.cookie("access_token", token, {
|
|
httpOnly: true, // JS cannot access
|
|
secure: process.env.NODE_ENV === "production", // HTTPS only in prod
|
|
sameSite: process.env.NODE_ENV === "production" ? "None" : "Lax",
|
|
maxAge: 24 * 60 * 60 * 1000, // 1 day
|
|
});
|
|
|
|
log(`JWT issued for ${email}`);
|
|
clearUserCache(email);
|
|
|
|
res.status(200).send({
|
|
success: true,
|
|
message: "Login Successful",
|
|
data: {
|
|
id: user.id,
|
|
email: user.email,
|
|
firstName: user.firstName,
|
|
lastName: user.lastName,
|
|
role: user.role,
|
|
accountType: user.accountType,
|
|
},
|
|
});
|
|
} catch (error) {
|
|
log("Error occurred during login:", error);
|
|
res.status(500).send({ success: false, message: error.message });
|
|
}
|
|
};
|
|
|
|
// Logout: Clear the JWT cookie
|
|
exports.logout = (req, res) => {
|
|
res.clearCookie("access_token", {
|
|
httpOnly: true,
|
|
secure: process.env.NODE_ENV === "production",
|
|
sameSite: process.env.NODE_ENV === "production" ? "None" : "Lax",
|
|
});
|
|
|
|
res.json({ success: true, message: "Logged out successfully" });
|
|
};
|