login working

src/routes/apiRoutes.js

@@ -2,6 +2,7 @@ const express = require('express');
 
 const invitesService = require('../services/invitesService');
 const nostrService = require('../services/nostrService');
+const loginService = require('../services/loginService');
 const sessionService = require('../services/sessionService');
 const profileService = require('../services/profileService');
 const errors = require('../errors');
@@ -89,6 +90,84 @@ router.post('/signup/nostr-verify', async (req, res) => {
   return res.status(200).json({ success: true });
 });
 
+router.get('/login/nostr-challenge', async (req, res) => {
+  let loginChallenge;
+  try {
+    loginChallenge = await loginService.createLoginChallenge();
+  } catch (error) {
+    return res.status(500).json({
+      success: false,
+      message: 'Unexpected error.',
+    });
+  }
+
+  let relatedNostrChallenge;
+  try {
+    relatedNostrChallenge = await nostrService.getNostrChallenge(
+      loginChallenge.nostr_challenge_uuid
+    );
+  } catch (error) {
+    return res.status(500).json({
+      success: false,
+      message: `Unexpected error: ${error}`,
+    });
+  }
+
+  return res.status(200).json({ challenge: relatedNostrChallenge.challenge });
+});
+
+router.post('/login/nostr-verify', async (req, res) => {
+  const signedEvent = req.body;
+  const sessionUuid = req.cookies.sessionUuid;
+
+  let completedLoginChallenge;
+  try {
+    completedLoginChallenge =
+      await loginService.verifyLoginChallenge(signedEvent);
+  } catch (error) {
+    console.log('helo5');
+    console.log(error);
+    if (error instanceof errors.ExpiredError) {
+      return res.status(410).json({
+        success: false,
+        message: 'The challenge has expired, request a new one.',
+      });
+    }
+    if (error instanceof errors.AlreadyUsedError) {
+      return res.status(410).json({
+        success: false,
+        message: 'The challenge has been used, request a new one.',
+      });
+    }
+    if (error instanceof errors.InvalidSignatureError) {
+      return res.status(400).json({
+        success: false,
+        message: 'The challenge signature is not valid.',
+      });
+    }
+    if (error instanceof errors.ForbiddenError) {
+      console.log('helo?1');
+      return res.status(403).json({
+        success: false,
+        message: 'This public key is not authorized.',
+      });
+    }
+
+    return res.status(500).json({
+      success: false,
+      message: 'Unexpected error.',
+    });
+  }
+  console.log('helo?2');
+  console.log(completedLoginChallenge);
+  await sessionService.relateSessionToPublicKey(
+    sessionUuid,
+    completedLoginChallenge.public_key
+  );
+
+  return res.status(200).json({ success: true });
+});
+
 router.post(
   '/set-contact-details',
   rejectIfNotAuthorizedMiddleware,