Add login and register

server/api/auth/login.post.ts

@@ -0,0 +1,46 @@
+import { verify } from 'argon2';
+import { useValidatedBody, z } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const { email, password } = await useValidatedBody(
+    event,
+    z.object({
+      email: z.email().min(5).trim(),
+      password: z.string().min(8)
+    })
+  );
+
+  const user = await prisma.user.findUnique({
+    where: {
+      deletedAt: null,
+      email
+    },
+    select: {
+      id: true,
+      password: true,
+      name: true,
+      role: true
+    }
+  });
+  if (!user || user.password.length <= 0) {
+    console.warn(`Failed login attempted: Unknown email: ${email}`);
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+  if (!(await verify(user.password, password))) {
+    console.warn(`Failed login attempted: Wrong password: ${email}`);
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+
+  console.warn(`Successful login attempted: ${email}`);
+  await setUserSession(event as any, {
+    user: {
+      id: user.id,
+      name: user.name,
+      role: user.role
+    },
+    loggedInAt: new Date()
+  });
+
+  return { success: true, user: { id: user.id } };
+});

server/api/auth/register.post.ts

@@ -0,0 +1,49 @@
+import { hash } from 'argon2';
+import { useValidatedBody, z } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  await clearUserSession(event as any);
+
+  const { email, password, name } = await useValidatedBody(
+    event,
+    z.object({
+      email: z.email().min(5).trim(),
+      password: z.string().min(8),
+      name: z.string().min(5).max(64).trim()
+    })
+  );
+
+  const exists = await prisma.user.findUnique({
+    where: {
+      email
+    },
+    select: { id: true }
+  });
+
+  if (exists !== null) {
+    throw createError({
+      status: 409,
+      statusText: 'User with that email already exists!'
+    });
+  }
+
+  const passwordHash = await hash(password);
+
+  const user = await prisma.user.create({
+    data: {
+      password: passwordHash,
+      name,
+      email
+    },
+    select: { id: true, name: true, role: true }
+  });
+
+  console.warn(`Successful register: ${email}`);
+
+  await setUserSession(event, {
+    user: user
+  });
+
+  return { success: true, user: { id: user.id } };
+});