-
Notifications
You must be signed in to change notification settings - Fork 0
/
handleLogin.js
79 lines (74 loc) · 2.12 KB
/
handleLogin.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
import { config } from "dotenv-flow";
import chalkTemplate from "chalk-template";
config();
const USERNAME = process.env.USERNAME;
const PASSWORD = process.env.PASSWORD;
const CSRFTOKEN = process.env.CSRFTOKEN;
const messages = {
requestHeaders: chalkTemplate`
{bold Request Headers}
`,
};
const handleLogin = (request, response) => {
if (
request.headers["content-type"]?.includes(
"application/x-www-form-urlencoded"
)
) {
let body = "";
request.on("data", (chunk) => {
body += chunk.toString();
});
request.on("end", () => {
const params = new URLSearchParams(body);
const username = params.get("username");
const password = params.get("password");
if (username === USERNAME && password === PASSWORD) {
response.setHeader(
"Set-Cookie",
`csrftoken=${CSRFTOKEN}; expires=Fri, 23 Jun 2023 12:22:38 GM; Max-Age=31449600;SameSite=Lax; Path=/`
);
response.writeHead(204);
response.end();
} else {
response.setHeader("Content-Type", "application/json");
response.writeHead(400);
response.end(
JSON.stringify({
__all__: [
"Please enter a correct username and password. Note that both fields may be case-sensitive.",
],
})
);
}
});
} else if (request.headers.cookie.includes(`csrftoken=${CSRFTOKEN}`)) {
if (process.env.LOG_LEVEL === "verbose") {
console.log(messages.requestHeaders);
console.log(request.headers);
}
response.setHeader("Content-Type", "application/json");
response.end(
JSON.stringify({
authenticated: true,
external_auth_url: null,
no_users: false,
})
);
} else {
response.setHeader("Content-Type", "application/json");
response.end(
JSON.stringify({
authenticated: false,
external_auth_url: null,
no_users: false,
})
);
}
};
const handleLogout = (request, response) => {
response.clearCookie("csrftoken");
response.writeHead(204);
response.end();
};
export { handleLogin, handleLogout };