Add login and register

server/api/auth/login.post.ts

@@ -0,0 +1,46 @@
+import { verify } from 'argon2';
+import { useValidatedBody, z } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const { email, password } = await useValidatedBody(
+    event,
+    z.object({
+      email: z.email().min(5).trim(),
+      password: z.string().min(8)
+    })
+  );
+
+  const user = await prisma.user.findUnique({
+    where: {
+      deletedAt: null,
+      email
+    },
+    select: {
+      id: true,
+      password: true,
+      name: true,
+      role: true
+    }
+  });
+  if (!user || user.password.length <= 0) {
+    console.warn(`Failed login attempted: Unknown email: ${email}`);
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+  if (!(await verify(user.password, password))) {
+    console.warn(`Failed login attempted: Wrong password: ${email}`);
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+
+  console.warn(`Successful login attempted: ${email}`);
+  await setUserSession(event as any, {
+    user: {
+      id: user.id,
+      name: user.name,
+      role: user.role
+    },
+    loggedInAt: new Date()
+  });
+
+  return { success: true, user: { id: user.id } };
+});