Maarten Elsenaar
ff395ac959
Genereert een HMAC-gesigneerd token (60s geldig) en redirect naar <slug>.rikxplatform.nl/auto-login. Token bevat userId, accountId en expiry; gedeeld AUTO_LOGIN_SECRET verifieert de handtekening. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
1017 B
TypeScript
30 lines
1017 B
TypeScript
"use server";
|
|
|
|
import { createHmac } from "crypto";
|
|
import { redirect } from "next/navigation";
|
|
import { getSession } from "../../lib/auth";
|
|
import { getPlatformDb } from "../../lib/platform-db";
|
|
|
|
export async function autoLogin(formData: FormData) {
|
|
const session = await getSession();
|
|
if (!session) redirect("/login");
|
|
|
|
const accountId = Number(formData.get("account_id"));
|
|
const slug = formData.get("slug") as string;
|
|
|
|
const db = getPlatformDb();
|
|
const user = db
|
|
.prepare("SELECT id FROM users WHERE account_id = ? AND role = 'admin' LIMIT 1")
|
|
.get(accountId) as { id: number } | undefined;
|
|
|
|
if (!user) redirect("/tenants?error=no-admin");
|
|
|
|
const secret = process.env.AUTO_LOGIN_SECRET!;
|
|
const expires = Date.now() + 60_000;
|
|
const payload = `${user.id}:${accountId}:${expires}`;
|
|
const sig = createHmac("sha256", secret).update(payload).digest("hex");
|
|
const token = `${payload}:${sig}`;
|
|
|
|
redirect(`https://${slug}.rikxplatform.nl/auto-login?token=${encodeURIComponent(token)}`);
|
|
}
|