44 lines
1.2 KiB
TypeScript
44 lines
1.2 KiB
TypeScript
import { prisma } from '@app/server/prisma/client';
|
|
import { MutationLoginArgs, Session } from '@generated/types';
|
|
import bcrypt from 'bcrypt';
|
|
import jwt from 'jsonwebtoken';
|
|
|
|
export async function LoginResolver(_: any, { input }: MutationLoginArgs): Promise<Session> {
|
|
const error = 'Invalid username or password';
|
|
|
|
const user = await prisma.user.findUnique({
|
|
where: { email: input.email }
|
|
});
|
|
if (!user) throw new Error(error);
|
|
|
|
const match = await bcrypt.compare(input.password, user.password);
|
|
if (!match) throw new Error(error);
|
|
|
|
const accessTokenSecret = process.env.ACCESS_TOKEN_SECRET;
|
|
const refreshTokenSecret = process.env.REFRESH_TOKEN_SECRET;
|
|
|
|
if (accessTokenSecret == null || refreshTokenSecret == null) throw new Error('No secrets found');
|
|
|
|
const accessToken = jwt.sign({ userId: user.id }, accessTokenSecret, {
|
|
expiresIn: '30s'
|
|
});
|
|
const refreshToken = jwt.sign({ userId: user.id }, refreshTokenSecret, {
|
|
expiresIn: '1d'
|
|
});
|
|
|
|
await prisma.user.update({
|
|
where: { id: user.id },
|
|
data: { refreshToken }
|
|
});
|
|
|
|
return {
|
|
accessToken,
|
|
refreshToken: {
|
|
token: refreshToken,
|
|
httpOnly: true,
|
|
secure: true,
|
|
maxAge: 24 * 60 * 60 * 1000,
|
|
sameSite: 'None'
|
|
}
|
|
};
|
|
}
|