refactor login page, change routes to token-based, add service classes

src/lib/server/authService.ts

@@ -0,0 +1,29 @@
+import { dev } from '$app/environment';
+import { fail, redirect, type Cookies, type RequestEvent } from '@sveltejs/kit';
+import { authenticate } from '$lib/auth';
+
+const COOKIE_NAME = 'session';
+
+export const loginUser = async ({ request, cookies }: { request: Request; cookies: Cookies }) => {
+	const data = await request.formData();
+	const user = data.get('user');
+	const password = data.get('password');
+
+	const token = authenticate(user, password);
+
+	if (!token) return fail(400, { user, incorrect: true });
+
+	cookies.set(COOKIE_NAME, token, {
+		path: '/',
+		httpOnly: true,
+		sameSite: 'strict',
+		secure: !dev
+	});
+	return redirect(303, '/');
+};
+
+export const logoutUser = async (event: RequestEvent) => {
+	event.cookies.delete(COOKIE_NAME, { path: '/' });
+	event.locals.user = null;
+	return { success: true };
+};

src/lib/server/s3ClientService.ts

@@ -0,0 +1,58 @@
+import { client } from '$lib/minio';
+
+const BUCKET = 'tatort';
+
+export const getVorgang = ({ params }) => {
+	const prefix = params.vorgang ? `${params.vorgang}/` : '';
+	const stream = client.listObjectsV2('tatort', prefix, false, '');
+	const result = new ReadableStream({
+		start(controller) {
+			stream.on('data', (data) => {
+				if (prefix === '') {
+					if (data.prefix)
+						controller.enqueue(`${JSON.stringify({ ...data, name: data.prefix.slice(0, -1) })}\n`);
+					return;
+				}
+
+				const name = data.name.slice(prefix.length);
+				if (name === 'config.json') return;
+				// zugangscode datei
+				if (name === '__perm__') return;
+
+				controller.enqueue(`${JSON.stringify({ ...data, name, prefix })}\n`);
+			});
+			stream.on('end', () => {
+				controller.close();
+			});
+		},
+		cancel() {
+			stream.destroy();
+		}
+	});
+
+	return new Response(result, {
+		headers: {
+			'content-type': 'text/event-stream'
+		}
+	});
+};
+
+
+export const checkIfExactDirectoryExists = (dir: string): Promise<boolean> => {
+	return new Promise<boolean>((resolve, reject) => {
+		const prefix = dir.endsWith('/') ? dir : `${dir}/`;
+
+		const stream = client.listObjectsV2(BUCKET, prefix, false, '');
+
+		stream.on('data', (obj) => {
+			if (obj.prefix === undefined && obj.name.startsWith(prefix)) {
+				stream.destroy();
+				resolve(true);
+			}
+		});
+
+		stream.on('error', (err) => reject(err));
+
+		stream.on('end', () => resolve(false));
+	});
+}

src/lib/server/vorgangService.ts

@@ -0,0 +1,68 @@
+import { fail, redirect } from '@sveltejs/kit';
+import { client } from '$lib/minio';
+import { checkIfExactDirectoryExists } from './s3ClientService';
+
+/**
+ * 
+ * @param request 
+ * @returns 
+ */
+export const getVorgangByCaseNumber = async ( request: Request) => {
+        const data = await request.formData();
+        const caseNumber = data.get('caseNumber');
+        const user_token = data.get('token');
+
+        if (!caseNumber) {
+            return fail(400, {
+                success: false,
+                caseNumber,
+                error: { message: 'Die Vorgangsnummer darf nicht leer sein.' }
+            });
+        }
+
+        if (typeof caseNumber === 'string' && !(await checkIfExactDirectoryExists(caseNumber))) {
+            return fail(400, {
+                success: false,
+                caseNumber,
+                error: { message: 'Die Vorgangsnummer existiert in dieser Anwendung nicht.' }
+            });
+        }
+
+
+        const token = await getTokenOrNull(caseNumber);
+
+        if (token && token != user_token) {
+            return fail(400, {
+                success: false,
+                caseNumber,
+                error: { message: 'Der Token ist falsch.' }
+            });
+        }
+
+        redirect(303, `/list/${caseNumber}`);
+    }
+
+
+const getTokenOrNull = async (vorgang) => {
+    const code_name = '__perm__';
+    const obj_path = `${vorgang}/${code_name}`;
+
+    let resp = null;
+    let code_saved = '';
+
+    try {
+        resp = await client.getObject('tatort', obj_path);
+        
+        code_saved = await new Response(resp).text();
+    } catch (error) {
+        if (error.name == 'S3Error') {
+            resp = null;
+        }
+    }
+
+    if (resp != null) {
+        return code_saved;
+    } else {
+        return null;
+    }
+}