news-analyze/server/api/user/checkcookie.ts
吳元皓 0e26a23261 Make a basic check date functon, and EVEN if the user does NOT have a
lastCheckCookie, they are forced to relog, as there is somewhat of a
risk it might be a bad attacker, also postgres has limits, and I don't
what to blow it all, so you need the lastCheck Cookie as is. (Yes this
is a super important commit :D
2025-05-17 21:22:48 +08:00

26 lines
720 B
TypeScript

// This should be hooked up to a database soon.
import postgres from "~/server/components/postgres";
export default defineEventHandler(async (event) => {
const loginCookie = getCookie(event, "session");
const lastCheckCookie = getCookie(event, "last_check");
if (!lastCheckCookie && loginCookie) {
deleteCookie(event, "session");
deleteCookie(event, "lastCheckCookie");
return {
auth: false,
user: null,
};
}
const checkDate = new Date().toLocaleString();
console.log(checkDate);
setCookie(event, "lastCheckCookie", checkDate, {
httpOnly: true,
secure: process.env.NODE_ENV === "production",
path: "/",
});
return {
auth: true,
user: "testing",
};
});