63 lines
No EOL
2.2 KiB
JavaScript
63 lines
No EOL
2.2 KiB
JavaScript
import { query } from '../utils/database.js';
|
|
import bcrypt from 'bcryptjs';
|
|
|
|
export const checkPassword = async (req, res) => {
|
|
try {
|
|
const [settings] = await query('SELECT id FROM admin_settings WHERE setting_key = ?', ['admin_password']);
|
|
res.json({ isFirstTime: !settings });
|
|
} catch (error) {
|
|
console.error('Error checking password:', error);
|
|
res.status(500).json({ message: 'Failed to check password status' });
|
|
}
|
|
};
|
|
|
|
export const setPassword = async (req, res) => {
|
|
try {
|
|
const { password } = req.body;
|
|
if (!password) {
|
|
return res.status(400).json({ message: 'Password is required' });
|
|
}
|
|
|
|
const hashedPassword = await bcrypt.hash(password, 10);
|
|
|
|
// Check if a password already exists
|
|
const [existingSettings] = await query('SELECT id FROM admin_settings WHERE setting_key = ?', ['admin_password']);
|
|
|
|
if (existingSettings) {
|
|
// Update existing password
|
|
await query('UPDATE admin_settings SET setting_value = ? WHERE setting_key = ?', [hashedPassword, 'admin_password']);
|
|
} else {
|
|
// Insert new password
|
|
await query('INSERT INTO admin_settings (setting_key, setting_value) VALUES (?, ?)', ['admin_password', hashedPassword]);
|
|
}
|
|
|
|
res.json({ message: 'Password set successfully' });
|
|
} catch (error) {
|
|
console.error('Error setting password:', error);
|
|
res.status(500).json({ message: 'Failed to set password' });
|
|
}
|
|
};
|
|
|
|
export const verifyPassword = async (req, res) => {
|
|
try {
|
|
const { password } = req.body;
|
|
if (!password) {
|
|
return res.status(400).json({ message: 'Password is required' });
|
|
}
|
|
|
|
const [settings] = await query('SELECT setting_value FROM admin_settings WHERE setting_key = ?', ['admin_password']);
|
|
if (!settings) {
|
|
return res.status(404).json({ message: 'No password set' });
|
|
}
|
|
|
|
const isValid = await bcrypt.compare(password, settings.setting_value);
|
|
if (!isValid) {
|
|
return res.status(401).json({ message: 'Invalid password' });
|
|
}
|
|
|
|
res.json({ message: 'Password verified successfully' });
|
|
} catch (error) {
|
|
console.error('Error verifying password:', error);
|
|
res.status(500).json({ message: 'Failed to verify password' });
|
|
}
|
|
};
|