From 617998e22b721de24a704371323901924ffe9f9e Mon Sep 17 00:00:00 2001
From: Tsu-ba-me <ynho.li.aa.e@gmail.com>
Date: Wed, 12 Apr 2023 00:05:03 -0400
Subject: [PATCH] fix(striker-ui-api): add passport login strategy

---
 striker-ui-api/src/passport.ts     | 83 ++++++++++++++++++++++++++++++
 striker-ui-api/src/types/User.d.ts |  4 ++
 2 files changed, 87 insertions(+)
 create mode 100644 striker-ui-api/src/passport.ts
 create mode 100644 striker-ui-api/src/types/User.d.ts

diff --git a/striker-ui-api/src/passport.ts b/striker-ui-api/src/passport.ts
new file mode 100644
index 00000000..09a85481
--- /dev/null
+++ b/striker-ui-api/src/passport.ts
@@ -0,0 +1,83 @@
+import passport from 'passport';
+import { Strategy as LocalStrategy } from 'passport-local';
+
+import { dbQuery, sub } from './lib/accessModule';
+import { stdout } from './lib/shell';
+
+passport.use(
+  'login',
+  new LocalStrategy((username, password, done) => {
+    stdout(`Attempting passport local strategy [login] for user [${username}]`);
+
+    let rows: [
+      userUuid: string,
+      userName: string,
+      userPasswordHash: string,
+      userSalt: string,
+      userAlgorithm: string,
+      userHashCount: string,
+    ][];
+
+    try {
+      rows = dbQuery(
+        `SELECT
+          user_uuid,
+          user_name,
+          user_password_hash,
+          user_salt,
+          user_algorithm,
+          user_hash_count
+        FROM users
+        WHERE user_algorithm != 'DELETED'
+          AND user_name = '${username}'
+        LIMIT 1;`,
+      ).stdout;
+    } catch (queryError) {
+      return done(queryError);
+    }
+
+    if (!rows.length) {
+      return done(null, false);
+    }
+
+    const {
+      0: [userUuid, , userPasswordHash, userSalt, userAlgorithm, userHashCount],
+    } = rows;
+
+    let encryptResult: {
+      user_password_hash: string;
+      user_salt: string;
+      user_hash_count: number;
+      user_algorithm: string;
+    };
+
+    try {
+      encryptResult = sub('encrypt_password', {
+        subModuleName: 'Account',
+        subParams: {
+          algorithm: userAlgorithm,
+          hash_count: userHashCount,
+          password,
+          salt: userSalt,
+        },
+      }).stdout;
+    } catch (subError) {
+      return done(subError);
+    }
+
+    const { user_password_hash: inputPasswordHash } = encryptResult;
+
+    if (inputPasswordHash !== userPasswordHash) {
+      return done(null, false);
+    }
+
+    const user: User = {
+      name: username,
+      uuid: userUuid,
+    };
+
+    return done(null, user);
+  }),
+);
+
+export default passport;
diff --git a/striker-ui-api/src/types/User.d.ts b/striker-ui-api/src/types/User.d.ts
new file mode 100644
index 00000000..a0a3a79c
--- /dev/null
+++ b/striker-ui-api/src/types/User.d.ts
@@ -0,0 +1,4 @@
+interface User extends Express.User {
+  name: string;
+  uuid: string;
+}