85 lines
2.2 KiB
TypeScript
85 lines
2.2 KiB
TypeScript
import { code } from "@spec/schemas/auth/routes.ts";
|
|
import cookie from "cookie";
|
|
|
|
import { auth, config } from "~libraries/auth/mod.ts";
|
|
import { logger } from "~libraries/logger/mod.ts";
|
|
import { Account } from "~stores/event-store/aggregates/account.ts";
|
|
import { Code } from "~stores/event-store/aggregates/code.ts";
|
|
import { eventStore } from "~stores/event-store/event-store.ts";
|
|
|
|
export default code.access("public").handle(async ({ params: { accountId, codeId, value }, query: { next } }) => {
|
|
const code = await eventStore.aggregate.getByStream(Code, codeId);
|
|
|
|
if (code === undefined) {
|
|
return logger.info({
|
|
type: "code:claimed",
|
|
session: false,
|
|
message: "Invalid Code ID",
|
|
received: codeId,
|
|
});
|
|
}
|
|
|
|
if (code.claimedAt !== undefined) {
|
|
return logger.info({
|
|
type: "code:claimed",
|
|
session: false,
|
|
message: "Code Already Claimed",
|
|
received: codeId,
|
|
});
|
|
}
|
|
|
|
await code.claim().save();
|
|
|
|
if (code.value !== value) {
|
|
return logger.info({
|
|
type: "code:claimed",
|
|
session: false,
|
|
message: "Invalid Value",
|
|
expected: code.value,
|
|
received: value,
|
|
});
|
|
}
|
|
|
|
if (code.identity.accountId !== accountId) {
|
|
return logger.info({
|
|
type: "code:claimed",
|
|
session: false,
|
|
message: "Invalid Account ID",
|
|
expected: code.identity.accountId,
|
|
received: accountId,
|
|
});
|
|
}
|
|
|
|
const account = await eventStore.aggregate.getByStream(Account, accountId);
|
|
if (account === undefined) {
|
|
return logger.info({
|
|
type: "code:claimed",
|
|
session: false,
|
|
message: "Account Not Found",
|
|
expected: code.identity.accountId,
|
|
received: undefined,
|
|
});
|
|
}
|
|
|
|
logger.info({ type: "code:claimed", session: true });
|
|
|
|
const options = config.cookie(1000 * 60 * 60 * 24 * 7);
|
|
|
|
if (next !== undefined) {
|
|
return new Response(null, {
|
|
status: 302,
|
|
headers: {
|
|
location: next,
|
|
"set-cookie": cookie.serialize("token", await auth.generate({ accountId: account.id }, "1 week"), options),
|
|
},
|
|
});
|
|
}
|
|
|
|
return new Response(null, {
|
|
status: 200,
|
|
headers: {
|
|
"set-cookie": cookie.serialize("token", await auth.generate({ accountId: account.id }, "1 week"), options),
|
|
},
|
|
});
|
|
});
|