From 905505c1b60be514a882e26a74bc9349be3e51fe Mon Sep 17 00:00:00 2001
From: Dan Mihailescu <as42554525@yahoo.ca>
Date: Sun, 15 Dec 2024 18:07:36 -0500
Subject: [PATCH] lucia login done

---
 prisma/dev.db                    | Bin 49152 -> 49152 bytes
 src/routes/login/+page.server.ts |  17 ++++++++++++++---
 2 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/prisma/dev.db b/prisma/dev.db
index 5a0a90c9b305e1442a25ae98dd31bd62897591f3..b89514455842ce68a50c183e32ece72ff1d59245 100644
GIT binary patch
delta 179
zcmZo@U~Xt&o*>PrGf~EwQD<Yql6)>^z9$U)OZn~jo@^F0xW?xc$;=kZ%F1e=S)P@Y
zW1d}}lbTp*R-TugTV|G4n30uVX<TkrYMPpsm0e_-T$NVII3-=kE}n7nnaO2|5OQ)}
pyyRs2`lCF|{8bG6%lWJLuQ0Fy4bS4&)nSfhB-UW&&CB~E4FKHYJ(d6f

delta 60
zcmZo@U~Xt&o*>PrJyFJ)QF~*;l6(#(etQP~rTq4r1r3b(C)?K_<zeDq&cMH%{|W;G
P0~=6uI{)V7{gDO$|EUo(

diff --git a/src/routes/login/+page.server.ts b/src/routes/login/+page.server.ts
index b60409d..6c6e9a1 100644
--- a/src/routes/login/+page.server.ts
+++ b/src/routes/login/+page.server.ts
@@ -1,9 +1,7 @@
 import { logger } from '$lib/server/logger';
 import { prisma } from '$lib/server/prisma';
 import { error, redirect, type Actions } from '@sveltejs/kit';
-//import { password } from 'bun';
 import { Argon2id } from "oslo/password"
-import { generateId } from 'lucia';
 import { auth } from '$lib/server/lucia.js';
 
 export const actions = {
@@ -21,12 +19,25 @@ export const actions = {
 			logger.error('User not found! ${user}');
 			return error(401);
 		}
-		event.cookies.set('user', String(user.id), {
+		const pw = form.get('password') as string;
+		if(!pw) {
+			return error(401, 'Password is required')
+		}
+		const validPassword = await new Argon2id().verify(user.password,pw);
+		if(!validPassword) {
+			return error(400, 'Password is incorrect!');
+		}
+		const session = await auth.createSession(user.id, []);
+		const sessionCookie = auth.createSessionCookie(session.id);
+		event.cookies.set(sessionCookie.name, sessionCookie.value, {
 			path: '/',
 			maxAge: 120
 		});
 		redirect(302, '/');
 	},
+
+
+
 	register: async (event) => {
 		const form = await event.request.formData();
 		if (!form.has('email') || !form.has('name') || !form.has('password')) {