Software/platform
1
1
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases 4 Wiki Activity

Replace auth verification with bun password api

Browse Source
This commit is contained in:
Dominic Ferrando
2026-08-21 10:27:55 -04:00
parent 4dbcccdef7
commit 7a4a8ee50b
2 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/api/src/server.ts
+3 -7
View File
@@ -10,7 +10,7 @@ import {
Printful, Printful,
Webflow, Webflow,
} from "@blade-and-brawn/commerce"; } from "@blade-and-brawn/commerce";
import { DEFAULT_NAME, env, log, sha256Sum } from "./util"; import { DEFAULT_NAME, DUMMY_PASSWORD_HASH, env, log, sha256Sum } from "./util";
import serverTiming from "@elysia/server-timing"; import serverTiming from "@elysia/server-timing";
import jwt from "@elysia/jwt"; import jwt from "@elysia/jwt";
import { CommerceService, WOrderStatusSchema } from "./services/commerce"; import { CommerceService, WOrderStatusSchema } from "./services/commerce";
@@ -139,12 +139,8 @@ export const app = new Elysia()
// AUTHENTICATION // AUTHENTICATION
.post("/auth/login", async ({ jwt, body: { password, email }, cookie: { auth } }) => { .post("/auth/login", async ({ jwt, body: { password, email }, cookie: { auth } }) => {
const account = await s.Accounts.getByEmail(email); const account = await s.Accounts.getByEmail(email);
const password_match = crypto.timingSafeEqual( const password_match = await Bun.password.verify(password, account?.password_hash ?? DUMMY_PASSWORD_HASH);
sha256Sum(password), if (!account || !password_match) throw status(401, "Invalid credentials");
account?.password_hash ? Buffer.from(account?.password_hash, "hex") : sha256Sum("Dummy")
);
if (!account?.password_hash || !password_match) throw status(401, "Invalid credentials");
auth.set({ auth.set({
value: await jwt.sign({ role: account.role, sessionId: randomUUIDv7(), accountId: account.id, exp: JWT_EXP }), value: await jwt.sign({ role: account.role, sessionId: randomUUIDv7(), accountId: account.id, exp: JWT_EXP }),
apps/api/src/util.ts
+1
View File
@@ -35,6 +35,7 @@ export const env = {
export const WORKER_COUNT = Math.min(os.availableParallelism(), +env.MAX_WORKER_COUNT); export const WORKER_COUNT = Math.min(os.availableParallelism(), +env.MAX_WORKER_COUNT);
export const DEFAULT_NAME = "Default"; export const DEFAULT_NAME = "Default";
export const DUMMY_PASSWORD_HASH = await Bun.password.hash("Dummy");
function requireEnv(key: string): string { function requireEnv(key: string): string {
const val = Bun.env[key]; const val = Bun.env[key];