server-ts: Convert routes/login

src/routes/login.ts

@@ -0,0 +1,111 @@
+"use strict";
+
+import utils = require('../services/utils');
+import optionService = require('../services/options');
+import myScryptService = require('../services/encryption/my_scrypt');
+import log = require('../services/log');
+import passwordService = require('../services/encryption/password');
+import assetPath = require('../services/asset_path');
+import appPath = require('../services/app_path');
+import ValidationError = require('../errors/validation_error');
+import { Request, Response } from 'express';
+import { AppRequest } from './route-interface';
+
+function loginPage(req: Request, res: Response) {
+    res.render('login', {
+        failedAuth: false,
+        assetPath: assetPath,
+        appPath: appPath
+    });
+}
+
+function setPasswordPage(req: Request, res: Response) {
+    res.render('set_password', {
+        error: false,
+        assetPath: assetPath,
+        appPath: appPath
+    });
+}
+
+function setPassword(req: Request, res: Response) {
+    if (passwordService.isPasswordSet()) {
+        throw new ValidationError("Password has been already set");
+    }
+
+    let {password1, password2} = req.body;
+    password1 = password1.trim();
+    password2 = password2.trim();
+
+    let error;
+
+    if (password1 !== password2) {
+        error = "Entered passwords don't match.";
+    } else if (password1.length < 4) {
+        error = "Password must be at least 4 characters long.";
+    }
+
+    if (error) {
+        res.render('set_password', {
+            error,
+            assetPath: assetPath
+        });
+        return;
+    }
+
+    passwordService.setPassword(password1);
+
+    res.redirect('login');
+}
+
+function login(req: AppRequest, res: Response) {
+    const guessedPassword = req.body.password;
+
+    if (verifyPassword(guessedPassword)) {
+        const rememberMe = req.body.rememberMe;
+
+        req.session.regenerate(() => {
+            if (rememberMe) {
+                req.session.cookie.maxAge = 21 * 24 * 3600000;  // 3 weeks
+            } else {
+                req.session.cookie.expires = false;
+            }
+
+            req.session.loggedIn = true;
+            res.redirect('.');
+        });
+    }
+    else {
+        // note that logged IP address is usually meaningless since the traffic should come from a reverse proxy
+        log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`);
+
+        res.status(401).render('login', {
+            failedAuth: true,
+            assetPath: assetPath
+        });
+    }
+}
+
+function verifyPassword(guessedPassword: string) {
+    const hashed_password = utils.fromBase64(optionService.getOption('passwordVerificationHash'));
+
+    const guess_hashed = myScryptService.getVerificationHash(guessedPassword);
+
+    return guess_hashed.equals(hashed_password);
+}
+
+function logout(req: AppRequest, res: Response) {
+    req.session.regenerate(() => {
+        req.session.loggedIn = false;
+
+        res.redirect('login');
+    });
+
+}
+
+export = {
+    loginPage,
+    setPasswordPage,
+    setPassword,
+    login,
+    logout
+};