37 lines
902 B
TypeScript
37 lines
902 B
TypeScript
import { NextResponse } from 'next/server'
|
|
import * as crypto from 'crypto'
|
|
|
|
const SECRET = process.env.APP_SECRET || 'smart-home-default-secret-change-me'
|
|
|
|
function makeToken(pin: string): string {
|
|
return crypto.createHmac('sha256', SECRET).update(pin).digest('hex')
|
|
}
|
|
|
|
export async function POST(req: Request) {
|
|
const { pin } = await req.json()
|
|
const correctPin = process.env.APP_PIN || '1234'
|
|
|
|
if (pin !== correctPin) {
|
|
return NextResponse.json({ error: 'wrong_pin' }, { status: 401 })
|
|
}
|
|
|
|
const token = makeToken(correctPin)
|
|
const res = NextResponse.json({ success: true })
|
|
|
|
res.cookies.set('auth_token', token, {
|
|
httpOnly: true,
|
|
secure: true,
|
|
sameSite: 'strict',
|
|
path: '/',
|
|
maxAge: 60 * 60 * 24 * 365,
|
|
})
|
|
|
|
return res
|
|
}
|
|
|
|
export async function DELETE() {
|
|
const res = NextResponse.json({ success: true })
|
|
res.cookies.delete('auth_token')
|
|
return res
|
|
}
|