f8616e32b4
- Local auth: registration/login with email+password (bcrypt, MariaDB) - Landing page: marketing page at / with hero, categories, advantages, CTA - Tool categories: Images (4), Code (3), Web (3), Utilities (2) - Sidebar: category dividers, user avatar with logout - Protected routes: all tools require auth, landing/login/register public - New files: lib/db.js, routes/auth.js, login.html, register.html, landing.html - Dependencies: bcrypt, mysql2
112 lines
3.4 KiB
JavaScript
112 lines
3.4 KiB
JavaScript
const express = require('express');
|
|
const bcrypt = require('bcrypt');
|
|
const path = require('path');
|
|
const db = require('../lib/db');
|
|
const log = require('../lib/logger');
|
|
|
|
const router = express.Router();
|
|
const SALT_ROUNDS = 10;
|
|
|
|
// Pages
|
|
router.get('/login', (req, res) => {
|
|
if (req.session.user) return res.redirect('/dashboard');
|
|
res.sendFile(path.join(__dirname, '..', 'public', 'login.html'));
|
|
});
|
|
|
|
router.get('/register', (req, res) => {
|
|
if (req.session.user) return res.redirect('/dashboard');
|
|
res.sendFile(path.join(__dirname, '..', 'public', 'register.html'));
|
|
});
|
|
|
|
// Login API
|
|
router.post('/login', express.json(), express.urlencoded({ extended: true }), async (req, res) => {
|
|
const { email, password } = req.body;
|
|
|
|
if (!email || !password) {
|
|
return res.status(400).json({ error: 'Email и пароль обязательны' });
|
|
}
|
|
|
|
try {
|
|
const user = await db.findUserByEmail(email.toLowerCase().trim());
|
|
if (!user) {
|
|
return res.status(401).json({ error: 'Неверный email или пароль' });
|
|
}
|
|
|
|
const valid = await bcrypt.compare(password, user.password_hash);
|
|
if (!valid) {
|
|
return res.status(401).json({ error: 'Неверный email или пароль' });
|
|
}
|
|
|
|
await db.updateLastLogin(user.id);
|
|
|
|
req.session.user = {
|
|
id: user.id,
|
|
email: user.email,
|
|
name: user.display_name || user.email.split('@')[0],
|
|
};
|
|
|
|
log.info(`Login: ${user.email}`);
|
|
res.json({ ok: true, redirect: req.session.returnTo || '/dashboard' });
|
|
delete req.session.returnTo;
|
|
} catch (err) {
|
|
log.error('Login error', { error: err.message });
|
|
res.status(500).json({ error: 'Ошибка сервера' });
|
|
}
|
|
});
|
|
|
|
// Register API
|
|
router.post('/register', express.json(), express.urlencoded({ extended: true }), async (req, res) => {
|
|
const { email, password, password2, name } = req.body;
|
|
|
|
if (!email || !password) {
|
|
return res.status(400).json({ error: 'Email и пароль обязательны' });
|
|
}
|
|
|
|
const emailClean = email.toLowerCase().trim();
|
|
if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(emailClean)) {
|
|
return res.status(400).json({ error: 'Некорректный email' });
|
|
}
|
|
|
|
if (password.length < 6) {
|
|
return res.status(400).json({ error: 'Пароль минимум 6 символов' });
|
|
}
|
|
|
|
if (password2 && password !== password2) {
|
|
return res.status(400).json({ error: 'Пароли не совпадают' });
|
|
}
|
|
|
|
try {
|
|
const existing = await db.findUserByEmail(emailClean);
|
|
if (existing) {
|
|
return res.status(409).json({ error: 'Этот email уже зарегистрирован' });
|
|
}
|
|
|
|
const hash = await bcrypt.hash(password, SALT_ROUNDS);
|
|
const displayName = (name || '').trim() || emailClean.split('@')[0];
|
|
const userId = await db.createUser(emailClean, hash, displayName);
|
|
|
|
req.session.user = { id: userId, email: emailClean, name: displayName };
|
|
|
|
log.info(`Register: ${emailClean}`);
|
|
res.json({ ok: true, redirect: '/dashboard' });
|
|
} catch (err) {
|
|
log.error('Register error', { error: err.message });
|
|
res.status(500).json({ error: 'Ошибка сервера' });
|
|
}
|
|
});
|
|
|
|
// Logout
|
|
router.get('/logout', (req, res) => {
|
|
req.session.destroy(() => {
|
|
res.redirect('/');
|
|
});
|
|
});
|
|
|
|
// Current user info
|
|
router.get('/me', (req, res) => {
|
|
if (!req.session.user) return res.status(401).json({ error: 'Not authenticated' });
|
|
res.json(req.session.user);
|
|
});
|
|
|
|
module.exports = router;
|