08846c9c63
useRuntimeConfig() and better-sqlite3 were being called at module top-level, which crashes during Nitro server startup. Now all DB access is lazy via useDb(), and auth uses process.env directly. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
44 lines
1.3 KiB
TypeScript
44 lines
1.3 KiB
TypeScript
import { randomBytes, timingSafeEqual } from 'crypto'
|
|
import type { H3Event } from 'h3'
|
|
import { useDb } from './db'
|
|
|
|
export function createSession(): string {
|
|
const db = useDb()
|
|
const token = randomBytes(32).toString('hex')
|
|
const expires = new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString()
|
|
db.prepare('INSERT INTO sessions (token, expires_at) VALUES (?, ?)').run(token, expires)
|
|
return token
|
|
}
|
|
|
|
export function validateSession(token: string): boolean {
|
|
const db = useDb()
|
|
const row = db.prepare('SELECT expires_at FROM sessions WHERE token = ?').get(token) as any
|
|
if (!row) return false
|
|
if (new Date(row.expires_at) < new Date()) {
|
|
db.prepare('DELETE FROM sessions WHERE token = ?').run(token)
|
|
return false
|
|
}
|
|
return true
|
|
}
|
|
|
|
export function destroySession(token: string) {
|
|
const db = useDb()
|
|
db.prepare('DELETE FROM sessions WHERE token = ?').run(token)
|
|
}
|
|
|
|
export function checkPassword(input: string): boolean {
|
|
const expected = process.env.ADMIN_PASSWORD || 'admin'
|
|
if (input.length !== expected.length) return false
|
|
return timingSafeEqual(Buffer.from(input), Buffer.from(expected))
|
|
}
|
|
|
|
export function isAdmin(event: H3Event): boolean {
|
|
return event.context.isAdmin === true
|
|
}
|
|
|
|
export function requireAdmin(event: H3Event) {
|
|
if (!isAdmin(event)) {
|
|
throw createError({ statusCode: 401, statusMessage: 'Unauthorized' })
|
|
}
|
|
}
|