feat: add supertokens

modules/identity/routes/login/code/handle.ts

@@ -1,85 +1,25 @@
 import { logger } from "@platform/logger";
-import cookie from "cookie";
+import { NotFoundError } from "@platform/relay";
+import { getSessionHeaders } from "@platform/supertoken/session.ts";
+import Passwordless from "supertokens-node/recipe/passwordless";
 
-import { Code } from "../../../aggregates/code.ts";
-import { Identity } from "../../../aggregates/identity.ts";
-import { auth } from "../../../auth.ts";
-import { config } from "../../../config.ts";
-import { eventStore } from "../../../event-store.ts";
 import route from "./spec.ts";
 
-export default route.access("public").handle(async ({ params: { identityId, codeId, value }, query: { next } }) => {
-  const code = await eventStore.aggregate.getByStream(Code, codeId);
-
-  if (code === undefined) {
-    return logger.info({
-      type: "code:claimed",
-      session: false,
-      message: "Invalid Code ID",
-      received: codeId,
-    });
+export default route.access("public").handle(async ({ body: { preAuthSessionId, deviceId, userInputCode } }) => {
+  const response = await Passwordless.consumeCode({ tenantId: "public", preAuthSessionId, deviceId, userInputCode });
+  if (response.status !== "OK") {
+    return new NotFoundError();
   }
 
-  if (code.claimedAt !== undefined) {
-    return logger.info({
-      type: "code:claimed",
-      session: false,
-      message: "Code Already Claimed",
-      received: codeId,
-    });
-  }
-
-  await code.claim().save();
-
-  if (code.value !== value) {
-    return logger.info({
-      type: "code:claimed",
-      session: false,
-      message: "Invalid Value",
-      expected: code.value,
-      received: value,
-    });
-  }
-
-  if (code.identity.id !== identityId) {
-    return logger.info({
-      type: "code:claimed",
-      session: false,
-      message: "Invalid Identity ID",
-      expected: code.identity.id,
-      received: identityId,
-    });
-  }
-
-  const account = await eventStore.aggregate.getByStream(Identity, identityId);
-  if (account === undefined) {
-    return logger.info({
-      type: "code:claimed",
-      session: false,
-      message: "Account Not Found",
-      expected: code.identity.id,
-      received: undefined,
-    });
-  }
-
-  logger.info({ type: "code:claimed", session: true });
-
-  const options = config.cookie(1000 * 60 * 60 * 24 * 7);
-
-  if (next !== undefined) {
-    return new Response(null, {
-      status: 302,
-      headers: {
-        location: next,
-        "set-cookie": cookie.serialize("token", await auth.generate({ id: account.id }, "1 week"), options),
-      },
-    });
-  }
+  logger.info({
+    type: "code:claimed",
+    session: true,
+    message: "Identity resolved",
+    user: response.user.toJson(),
+  });
 
   return new Response(null, {
     status: 200,
-    headers: {
-      "set-cookie": cookie.serialize("token", await auth.generate({ id: account.id }, "1 week"), options),
-    },
+    headers: await getSessionHeaders("public", response.recipeUserId),
   });
 });