Hornwitser
150cb82f5c
Provide a basic account system with login and server side session store identified by a cookie. Upon successful login a signed session cookie is set by the server with the session stored on the server identifying which account it is logged in as. The client uses a shared useFetch on the session endpoint to identify if it's logged in and which account it is logged in as, and refreshes this when loggin in or out.
18 lines
428 B
TypeScript
18 lines
428 B
TypeScript
import { readAccounts } from "~/server/database";
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const { name } = await readBody(event);
|
|
|
|
if (!name) {
|
|
return new Response(undefined, { status: 400 })
|
|
}
|
|
|
|
const accounts = await readAccounts();
|
|
const account = accounts.find(a => a.name === name);
|
|
|
|
if (!account) {
|
|
return new Response(undefined, { status: 403 })
|
|
}
|
|
|
|
await setAccountSession(event, account.id);
|
|
})
|