session upgrades work

src/routes/apiRoutes.js

@@ -2,6 +2,7 @@ const express = require('express');
 
 const invitesService = require('../services/invitesService');
 const nostrService = require('../services/nostrService');
+const sessionService = require('../services/sessionService');
 const { TimeoutError } = require('sequelize');
 const errors = require('../errors');
 
@@ -55,22 +56,37 @@ router.get('/signup/nostr-challenge', async (req, res) => {
 
 router.post("/signup/nostr-verify", async (req, res) => {
     const signedEvent = req.body;
+    const sessionUuid = req.cookies.sessionUuid;
 
+    let completedSignUpChallenge;
     try {
-        console.log(`Starting nostr-verify with event: ${signedEvent}`);
-        const completedSignUpChallenge = await invitesService.verifySignUpChallenge(signedEvent);
-        console.log(`Finished nostr-verify`);
+        completedSignUpChallenge = await invitesService.verifySignUpChallenge(signedEvent);
     } catch (error) {
-        if (error instanceof TimeoutError) {
-            console.error('The challenge is outdated.');
+        if (error instanceof errors.ExpiredError) {
+            return res.status(410).json({
+                success: false,
+                message: 'The challenge has expired, request a new one.'
+            })
         }
         if (error instanceof errors.AlreadyUsedError) {
-            console.error('The challenge was already used, request a new one.');
+            return res.status(410).json({
+                success: false,
+                message: 'The challenge has been used, request a new one.'
+            })
         }
         if (error instanceof errors.InvalidSignatureError) {
-            console.error('Signature is not valid.')
+            return res.status(400).json({
+                success: false,
+                message: 'The challenge signature is not valid.'
+            })
         }
     }
+
+    await sessionService.relateSessionToPublicKey(
+        sessionUuid,
+        completedSignUpChallenge.public_key
+    )
+
     return res.status(200).json({ success: true });
 });
 

src/routes/webRoutes.js

@@ -32,6 +32,30 @@ router.get('/invite/:inviteUuid', async (req, res) => {
     return res.render('invite', { invite });
 });
 
+router.get('/invite/:inviteUuid', async (req, res) => {
+    const { inviteUuid } = req.params;
+
+    res.cookie('inviteUuid', inviteUuid, { httpOnly: true, maxAge: 86400000 });
+
+    let invite;
+    try {
+        invite = await invitesService.getAppInvite(inviteUuid);
+        if (!invite) {
+            return res.status(404).render('error', { message: 'Invite not found.' });
+        }
+
+        if (await invitesService.isAppInviteSpent(inviteUuid)) {
+            return res.status(410).render('invite_spent', { invite })
+        }
+
+    } catch (error) {
+        console.error('Error fetching invite:', error);
+        return res.status(500).render('error', { message: 'An error occurred' });
+    }
+
+    return res.render('invite', { invite });
+});
+
 router.get('/private', authMiddleware, (req, res) => {
     res.render('private', {});
 });