implemented authentication

server/api/login.ts

@@ -1,4 +1,4 @@
-import { loginSuccessful, errorMsg } from "../middleware/login";
+import { loginSuccessful, sessionToken, errorMsg } from "../middleware/login";
 import { OutgoingMessage } from 'http';
 
 export default defineEventHandler(async (event) => {
@@ -10,6 +10,11 @@ export default defineEventHandler(async (event) => {
         })
     }
 
-    setResponseStatus(event, 200)
-    return 'Successfully logged in.'
+    setResponseStatus(event, 200);
+    //setResponseHeader(event, "Set-Cookie", sessionToken);
+    const resBody = {
+        token: sessionToken,
+        message: 'Login successful'
+    };
+    return resBody;
 })

server/main.ts

@@ -0,0 +1 @@
+import { pinia } from '@/store'

server/middleware/auth.global.js

@@ -0,0 +1,63 @@
+import { useAuthStore } from '~/store/auth';
+
+
+export default defineEventHandler (async (event) => { 
+    // Check if user is not authenticated and trying to access a page other than /login
+    let isAuthenticated = false;
+
+    if (event.path !== '/login' && event.path !== '/api/login') {
+    
+        //const reqUsername = getHeader(event, "Authorization");
+        //const reqCookie = getHeader(event, "Cookie");
+        const reqUsername = getCookie(event, 'user');
+        const reqToken = getCookie(event, 'token');
+        //console.log('getHeader: ', reqCookie);
+        console.log('getCookie user: ', reqUsername);
+        console.log('getCookie token: ', reqToken);
+
+        const auth = useAuthStore();
+        const authUsername = auth.username;
+        const authToken = auth.token;
+
+        console.log('auth user: ', authUsername);
+        console.log('auth token: ', authToken);
+
+        if (authUsername == reqUsername && authToken == reqToken) {
+            isAuthenticated = true;
+        }
+
+
+    if (!isAuthenticated) {
+        await sendRedirect(event, '/login');
+    }
+    }
+});
+  
+/*function isAuthenticated(event) {
+    // Implement authentication logic 
+    /*const auth = useAuthStore();
+    const authUsername = auth.username;
+    const authToken = auth.token;
+
+    const reqUsername = getHeader(event, 'Authorization');
+    const reqCookie = getHeader(event, 'Cookie');
+    const reqToken = useCookie('token');
+    console.log('getHeader: ', reqCookie);
+    console.log('useCookie: ', reqToken);
+
+    if (authUsername.equals(reqUsername) ) {
+        return true;
+    }*/
+
+    /*return false;
+    // Return true if authenticated, false otherwise
+}*/
+
+
+/*export default defineNuxtRouteMiddleware((to) => {
+    const auth = useAuthStore();
+    const authUsername = auth.username;
+    const authToken = auth.token;
+
+    const reqUsername = 
+})*/

server/middleware/login.ts

@@ -1,8 +1,10 @@
 import axios, { AxiosError } from 'axios';
 import serversideConfig from '../../serversideConfig';
 import https from 'https';
+import { useAuthStore } from '~/store/auth';
 
 let loginSuccessful = false;
+let sessionToken = 'token';
 let errorMsg = '';
 
 export default defineEventHandler(async (event) => {
@@ -29,6 +31,9 @@ export default defineEventHandler(async (event) => {
                 username: body.username,
                 password: body.password,
             });
+            sessionToken = res.data.token;
+            const auth = useAuthStore();
+            auth.createNewSession(res.data.user, sessionToken);
             loginSuccessful = true;
         } catch (err) {
             if (axios.isAxiosError(err)) {
@@ -53,4 +58,4 @@ export default defineEventHandler(async (event) => {
     }
 })
 
-export { loginSuccessful, errorMsg };
+export { loginSuccessful, sessionToken, errorMsg };