refactor(auth): remove debug logging and enhance session middleware

- Eliminated extensive debug logging from the login strategy and verification endpoint to streamline the authentication process.
- Updated session middleware to improve cookie handling, enabling proxy support and adjusting session creation behavior.
- Ensured secure cookie settings for cross-origin requests in production environments.
This commit is contained in:
chamikaJ
2025-06-02 13:20:40 +05:30
parent 24fa837a39
commit 69f5009579
4 changed files with 11 additions and 49 deletions

View File

@@ -6,18 +6,11 @@ import { Request } from "express";
import { ERROR_KEY, SUCCESS_KEY } from "./passport-constants";
async function handleLogin(req: Request, email: string, password: string, done: any) {
console.log("=== LOGIN STRATEGY STARTED ===");
console.log("Login attempt for:", email);
console.log("Password provided:", !!password);
console.log("Request body:", req.body);
// Clear any existing flash messages
(req.session as any).flash = {};
if (!email || !password) {
console.log("Missing credentials - email:", !!email, "password:", !!password);
const errorMsg = "Please enter both email and password";
console.log("Setting error flash message:", errorMsg);
req.flash(ERROR_KEY, errorMsg);
return done(null, false);
}
@@ -29,33 +22,25 @@ async function handleLogin(req: Request, email: string, password: string, done:
AND google_id IS NULL
AND is_deleted IS FALSE;`;
const result = await db.query(q, [email]);
console.log("User query result count:", result.rowCount);
const [data] = result.rows;
if (!data?.password) {
console.log("No account found for email:", email);
const errorMsg = "No account found with this email";
console.log("Setting error flash message:", errorMsg);
req.flash(ERROR_KEY, errorMsg);
return done(null, false);
}
const passwordMatch = bcrypt.compareSync(password, data.password);
console.log("Password match result:", passwordMatch);
if (passwordMatch && email === data.email) {
delete data.password;
console.log("Login successful for user:", data.id);
const successMsg = "User successfully logged in";
console.log("Setting success flash message:", successMsg);
req.flash(SUCCESS_KEY, successMsg);
return done(null, data);
}
console.log("Password mismatch or email mismatch");
const errorMsg = "Incorrect email or password";
console.log("Setting error flash message:", errorMsg);
req.flash(ERROR_KEY, errorMsg);
return done(null, false);
} catch (error) {