Refactor authentication flow; improve error handling, implement token creation and verification, and enhance user session management. Fixed login issue. Currently working on user authorisation for creating teams.

This commit is contained in:
bobbert committed 2025-03-12 18:11:33 +00:00
1 parent ce962162cb
commit b039af238f
5 files changed
+498 -201

No files matched your search

+36
View File
@@ -0,0 +1,36 @@
const NEXTAUTH_SECRET = "banana";
// Function to create a signed token
export function createToken(payload) {
const encodedData = Buffer.from(JSON.stringify(payload)).toString("base64");
const signature = Buffer.from(`${encodedData}.${NEXTAUTH_SECRET}`).toString(
"base64"
);
return `${encodedData}.${signature}`;
}
// Function to verify a token
export function verifyToken(token) {
try {
if (!token) return null;
const [encodedData, signature] = token.split(".");
const expectedSignature = Buffer.from(
`${encodedData}.${NEXTAUTH_SECRET}`
).toString("base64");
if (signature !== expectedSignature) return null;
const data = JSON.parse(
Buffer.from(encodedData, "base64").toString("utf-8")
);
// Check if token is expired
if (data.exp && data.exp < Math.floor(Date.now() / 1000)) return null;
return data;
} catch (error) {
console.error("Token verification error:", error);
return null;
}
}