mirror of
https://github.com/kremalicious/umami.git
synced 2024-09-27 19:58:48 +02:00
24 lines
710 B
JavaScript
24 lines
710 B
JavaScript
import { ok, unauthorized, badRequest, checkPassword, createSecureToken } from 'next-basics';
|
|
import { getAccountByUsername } from 'queries/admin/account/getAccountByUsername';
|
|
import { secret } from 'lib/crypto';
|
|
|
|
export default async (req, res) => {
|
|
const { username, password } = req.body;
|
|
|
|
if (!username || !password) {
|
|
return badRequest(res);
|
|
}
|
|
|
|
const account = await getAccountByUsername(username);
|
|
|
|
if (account && checkPassword(password, account.password)) {
|
|
const { user_id, username, is_admin } = account;
|
|
const user = { user_id, username, is_admin };
|
|
const token = createSecureToken(user, secret());
|
|
|
|
return ok(res, { token, user });
|
|
}
|
|
|
|
return unauthorized(res);
|
|
};
|