forked from Chewing_Bever/rusty-bever
28 lines
781 B
Rust
28 lines
781 B
Rust
use crate::RbDbConn;
|
|
use rb::auth::{verify_user, JWTResponse, generate_jwt_token};
|
|
use rocket::serde::json::Json;
|
|
use serde::Deserialize;
|
|
|
|
#[derive(Deserialize)]
|
|
struct Credentials {
|
|
username: String,
|
|
password: String,
|
|
}
|
|
|
|
// TODO add catch for when user immediately requests new JWT token (they could totally spam this)
|
|
|
|
#[post("/login", data = "<credentials>")]
|
|
async fn login(conn: RbDbConn, credentials: Json<Credentials>) -> rb::Result<Json<JWTResponse>> {
|
|
let credentials = credentials.into_inner();
|
|
|
|
// Get the user, if credentials are valid
|
|
let user = conn
|
|
.run(move |c| verify_user(c, &credentials.username, &credentials.password))
|
|
.await?;
|
|
|
|
Ok(Json(conn.run(move |c| generate_jwt_token(c, &user)).await?))
|
|
}
|
|
|
|
// /refresh
|
|
// /logout
|