const bodyParser = require("body-parser"); const express = require("express"); let session = require('express-session') module.exports = function UserInteractions(opts) { async function sha256(message) { // encode as UTF-8 const msgBuffer = new TextEncoder().encode(message); // hash the message const hashBuffer = await crypto.subtle.digest('SHA-256', msgBuffer); // convert ArrayBuffer to Array const hashArray = Array.from(new Uint8Array(hashBuffer)); // convert bytes to hex string const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join(''); return hashHex; } let app = opts.app; app.use(session({ secret: "rtifhg5878fj", resave: false, saveUninitialized: false, cookie: { secure: "auto" } })) app.use(bodyParser.json({"limit": "200mb"})); app.use(express.json()); let db = opts.db; console.log("init") app.get("/userapi", (req, res) => { res.end(JSON.stringify(req.session)); }) app.post("/login", async functioqn (req, res) { db.execute("SELECT uuid from user where username = ? and password = ?", [req.body.username, await sha256(req.body.password)], function (err, result) { if (result.length === 0) { res.status(500).json({code: 500, R: "DNE"}) return; } req.session.uuid = result[0].uuid; res.header("").status(200).json({code: 200, R: "SS", uid: result[0].uuid}); }) }) app.post("/register", function (req, res) { db.execute("SELECT uuid FROM user WHERE username = ?", [req.body.username], async function (err, rows) { if (req.body.username === undefined || req.body.username === "" || req.body.username === null || req.body.password === undefined || req.body.password === "" || req.body.password === null) { res.status(500).json({code: 500, R: "PE"}) return; } if (err) { console.log(err); res.status(500).json({code: 500, R: "UNE"}); return; } if (rows.length === 0) { db.execute("INSERT INTO user (uuid, username, email, password, avatar, time) values (?,?,?,?,?,?)", [crypto.randomUUID(), req.body.username, null, await sha256(req.body.password), null, Date.now()]); res.json({code: 200, R: "SS"}); return; } res.status(500).json({code: 500, R: "UE"}); return; }) }) }