Inital commit

src/app.ts

@@ -0,0 +1,67 @@
+import * as dotenv from "dotenv"
+import express, { RequestHandler } from "express"
+import jwt from "jsonwebtoken"
+import cors from "cors"
+import cookieParser from "cookie-parser"
+
+import { getJwtSecret } from "./utils/jwt.js"
+
+const authMiddleware: RequestHandler = (req, res, next) => {
+	const token = req.cookies.jwt
+	if (token == undefined) {
+		res.status(400).send({ message: "Cannot find jwt auth cookie." })
+		return
+	}
+
+	try {
+		jwt.verify(token, getJwtSecret())
+	} catch (error) {
+		res.status(400).send({ message: "Incorrect JWT.", error })
+		return
+	}
+
+	next()
+}
+
+const appRouterGet: RequestHandler = (req, res) => {
+	res.send({ code: 200, message: "ParisMuseesQuizz v1.0" })
+}
+
+function initEnvVariables(): void {
+	dotenv.config()
+	const varsToCheck = ["API_PORT", "FRONT_ORIGIN"]
+
+	varsToCheck.forEach((varName) => {
+		const variable = process.env[varName]
+
+		if (variable == undefined || variable === "") {
+			console.error(`Missing '${varName}' in .env`)
+			process.exit()
+		}
+	})
+}
+
+export function initServer(): express.Express {
+	initEnvVariables()
+
+	const app = express()
+	const appRouter = express.Router()
+
+	app.use(cors({ origin: process.env.FRONT_ORIGIN, credentials: true }))
+	app.use(cookieParser())
+	app.use(express.json())
+	app.use(express.urlencoded({ extended: false }))
+
+	appRouter.get("/", appRouterGet)
+
+	appRouter.use("/session/", sessionRouter)
+	appRouter.use("/user/", authMiddleware, userRouter)
+
+	app.use("/v1/", appRouter)
+
+	return app
+}
+
+export function startServer(app: express.Express): void {
+	app.listen(process.env.API_PORT, () => console.log(`Listening on port ${process.env.API_PORT}`))
+}

src/index.ts

@@ -0,0 +1,4 @@
+import { startServer, initServer } from "./app.js"
+
+const app = initServer()
+startServer(app)

src/routers/session.ts

@@ -0,0 +1,110 @@
+import { PrismaClient, User } from "@prisma/client"
+import express from "express"
+import { RequestHandler } from "express-serve-static-core"
+import { z } from "zod"
+import { getJwtSecret } from "../utils/jwt.js"
+import bcrypt from "bcrypt"
+import jwt from "jsonwebtoken"
+
+interface LoginData {
+	email: string
+	password: string
+}
+
+const sessionRouter = express.Router()
+const prisma = new PrismaClient()
+
+const LoginValidator = z.object({
+	email: z.string().email(),
+	password: z.string().min(4).max(20),
+})
+
+export function parseJwtUserId(jwtoken: string): number | undefined {
+	const payload = jwt.decode(jwtoken)
+	if (payload == undefined) {
+		return undefined
+	} else if (typeof payload == "string") {
+		return undefined
+	}
+	return payload.userId
+}
+
+async function isUserValid(user: User | null, loginData: any): Promise<boolean> {
+	if (user == undefined) return false
+	return await bcrypt.compare(loginData.password, user.password)
+}
+
+async function isUserEmailAlreadyUsed(email: string): Promise<boolean> {
+	const user = await prisma.user.findFirst({ where: { email } })
+	return user != undefined
+}
+
+async function createUser(email: string, password: string) {
+	await prisma.user.create({
+		data: {
+			email: email,
+			password: password,
+			name: "",
+			picture_path: "",
+			created_at: new Date(),
+			updated_at: new Date(),
+		},
+	})
+}
+
+async function getUserByEmail(email: string): Promise<User | null> {
+	return await prisma.user.findFirst({ where: { email } })
+}
+
+function parseLoginData(data: any): LoginData | undefined {
+	try {
+		return LoginValidator.parse(data)
+	} catch {
+		return undefined
+	}
+}
+
+export const userRouterPostLogin: RequestHandler = async (req, res) => {
+	const loginData = parseLoginData(req.body)
+	if (loginData === undefined) {
+		res.status(400).json({ message: "Incorrect credentials format." })
+		return
+	}
+
+	const user = await getUserByEmail(loginData.email)
+	if (!(await isUserValid(user, loginData))) {
+		res.status(400).json({ message: "Incorrect credentials." })
+		return
+	}
+
+	const jwtToken = jwt.sign({ userId: user?.id }, getJwtSecret(), { expiresIn: "1h" })
+	res.cookie("jwt", jwtToken, {
+		httpOnly: true,
+		secure: true,
+		sameSite: "strict",
+	}).json({ message: "Logged in! httpOnly cookie set." })
+}
+
+export const userRouterPostRegister: RequestHandler = async (req, res) => {
+	const loginData = parseLoginData(req.body)
+	if (loginData == undefined) {
+		res.status(400).json({ message: "Incorrect credentials format." })
+		return
+	}
+
+	if (await isUserEmailAlreadyUsed(loginData.email)) {
+		res.status(400).json({ message: "Email already linked to an account." })
+		return
+	}
+
+	const hashedPassword = await bcrypt.hash(loginData.password, 10)
+
+	await createUser(loginData.email, hashedPassword)
+
+	res.json({ message: "User successfully created!" })
+}
+
+sessionRouter.post("/login", userRouterPostLogin)
+sessionRouter.post("/register", userRouterPostRegister)
+
+export default sessionRouter

src/utils/jwt.ts

@@ -0,0 +1,7 @@
+export function getJwtSecret(): string {
+	if (process.env["JWT_SECRET"] == undefined) {
+		console.error("WARNING! JWT secret is not set.")
+		process.exit()
+	}
+	return process.env["JWT_SECRET"]
+}

src/utils/pagination.ts

@@ -0,0 +1,21 @@
+import { z } from "zod"
+
+export interface Pagination {
+	skip: number
+	take: number
+}
+
+export const queryPaginationParser = z.object({
+	skip: z.coerce.number().optional().default(0),
+	take: z.coerce.number().optional().default(10),
+})
+
+export function getPaginationLinks(query: Pagination, routeName: string): object {
+	const nextStart = query.skip + query.take
+	const prevStart = Math.max(0, query.skip - query.take)
+
+	return {
+		next: `/v1/${routeName}?start=${nextStart}&per_page=${query.take}`,
+		prev: `/v1/${routeName}?start=${prevStart}&per_page=${query.take}`,
+	}
+}