import type { FastifyInstance, FastifyReply } from "fastify";
import type {
AuthRequest,
AuthResponse,
ForgotPasswordRequest,
ForgotPasswordResponse,
ResendVerificationRequest,
ResetPasswordRequest,
ResetPasswordResponse,
VerifyEmailRequest,
VerifyEmailResponse
} from "@skola/shared";
import {
loginUser,
registerUser,
requestPasswordReset,
resendVerificationEmail,
resetPassword,
verifyEmailToken
} from "../services/auth-store.js";
interface TokenQuery {
token?: string;
}
function toErrorMessage(error: unknown): string {
return error instanceof Error ? error.message : "Unexpected authentication error.";
}
function sendHtml(reply: FastifyReply, html: string, statusCode = 200): void {
reply.code(statusCode).type("text/html; charset=utf-8").send(html);
}
function renderStatusPage(title: string, message: string): string {
return `
${title}
${title}
${message}
You can close this tab and return to Microsoft Word.
`;
}
function renderResetPage(token: string): string {
return `
Reset Skola password
Reset your Skola password
`;
}
export async function registerAuthRoutes(app: FastifyInstance): Promise {
app.post<{ Body: AuthRequest; Reply: AuthResponse }>("/v1/auth/register", async (request) => {
return registerUser(request.body.email, request.body.password, request.body.name);
});
app.post<{ Body: AuthRequest; Reply: AuthResponse }>("/v1/auth/login", async (request) => {
return loginUser(request.body.email, request.body.password);
});
app.post<{ Body: ForgotPasswordRequest; Reply: ForgotPasswordResponse }>(
"/v1/auth/forgot-password",
async (request) => requestPasswordReset(request.body.email)
);
app.post<{ Body: ResendVerificationRequest; Reply: ForgotPasswordResponse }>(
"/v1/auth/resend-verification",
async (request) => resendVerificationEmail(request.body.email)
);
app.post<{ Body: VerifyEmailRequest; Reply: VerifyEmailResponse }>(
"/v1/auth/verify-email",
async (request) => verifyEmailToken(request.body.token)
);
app.get<{ Querystring: TokenQuery }>("/v1/auth/verify-email", async (request, reply) => {
try {
const response = await verifyEmailToken(request.query.token ?? "");
sendHtml(reply, renderStatusPage("Email verified", response.message));
} catch (error) {
sendHtml(reply, renderStatusPage("Verification failed", toErrorMessage(error)), 400);
}
});
app.get<{ Querystring: TokenQuery }>("/v1/auth/reset-password", async (request, reply) => {
sendHtml(reply, renderResetPage(request.query.token ?? ""));
});
app.post<{ Body: ResetPasswordRequest; Reply: ResetPasswordResponse }>(
"/v1/auth/reset-password",
async (request) => resetPassword(request.body.token, request.body.password)
);
}