refactor(auth): remove debug logging and enhance session middleware
- Eliminated extensive debug logging from the login strategy and verification endpoint to streamline the authentication process. - Updated session middleware to improve cookie handling, enabling proxy support and adjusting session creation behavior. - Ensured secure cookie settings for cross-origin requests in production environments.
This commit is contained in:
@@ -6,18 +6,11 @@ import { Request } from "express";
|
||||
import { ERROR_KEY, SUCCESS_KEY } from "./passport-constants";
|
||||
|
||||
async function handleLogin(req: Request, email: string, password: string, done: any) {
|
||||
console.log("=== LOGIN STRATEGY STARTED ===");
|
||||
console.log("Login attempt for:", email);
|
||||
console.log("Password provided:", !!password);
|
||||
console.log("Request body:", req.body);
|
||||
|
||||
// Clear any existing flash messages
|
||||
(req.session as any).flash = {};
|
||||
|
||||
if (!email || !password) {
|
||||
console.log("Missing credentials - email:", !!email, "password:", !!password);
|
||||
const errorMsg = "Please enter both email and password";
|
||||
console.log("Setting error flash message:", errorMsg);
|
||||
req.flash(ERROR_KEY, errorMsg);
|
||||
return done(null, false);
|
||||
}
|
||||
@@ -29,33 +22,25 @@ async function handleLogin(req: Request, email: string, password: string, done:
|
||||
AND google_id IS NULL
|
||||
AND is_deleted IS FALSE;`;
|
||||
const result = await db.query(q, [email]);
|
||||
console.log("User query result count:", result.rowCount);
|
||||
|
||||
const [data] = result.rows;
|
||||
|
||||
if (!data?.password) {
|
||||
console.log("No account found for email:", email);
|
||||
const errorMsg = "No account found with this email";
|
||||
console.log("Setting error flash message:", errorMsg);
|
||||
req.flash(ERROR_KEY, errorMsg);
|
||||
return done(null, false);
|
||||
}
|
||||
|
||||
const passwordMatch = bcrypt.compareSync(password, data.password);
|
||||
console.log("Password match result:", passwordMatch);
|
||||
|
||||
if (passwordMatch && email === data.email) {
|
||||
delete data.password;
|
||||
console.log("Login successful for user:", data.id);
|
||||
const successMsg = "User successfully logged in";
|
||||
console.log("Setting success flash message:", successMsg);
|
||||
req.flash(SUCCESS_KEY, successMsg);
|
||||
return done(null, data);
|
||||
}
|
||||
|
||||
console.log("Password mismatch or email mismatch");
|
||||
const errorMsg = "Incorrect email or password";
|
||||
console.log("Setting error flash message:", errorMsg);
|
||||
req.flash(ERROR_KEY, errorMsg);
|
||||
return done(null, false);
|
||||
} catch (error) {
|
||||
|
||||
Reference in New Issue
Block a user