first commit

server/api/rooms/[roomId]/access.post.ts

@@ -0,0 +1,59 @@
+import bcrypt from 'bcryptjs'
+import { prisma } from '../../../utils/db'
+import { signRoomAccessToken, verifyRoomAccessToken } from '../../../utils/roomAccess'
+
+export default defineEventHandler(async (event) => {
+  const roomId = getRouterParam(event, 'roomId')
+  if (!roomId) {
+    throw createError({ statusCode: 400, statusMessage: 'Room id required' })
+  }
+
+  const body = await readBody<{
+    password?: string
+    clientId?: string
+    accessToken?: string
+  }>(event)
+
+  if (!body?.clientId) {
+    throw createError({ statusCode: 400, statusMessage: 'clientId required' })
+  }
+
+  const room = await prisma.room.findUnique({ where: { id: roomId } })
+  if (!room) {
+    throw createError({ statusCode: 404, statusMessage: 'Room not found' })
+  }
+
+  const expected = {
+    roomId: room.id,
+    clientId: body.clientId,
+    pwdVersion: room.pwdVersion,
+  }
+
+  if (body.accessToken) {
+    try {
+      await verifyRoomAccessToken(body.accessToken, expected)
+      const accessToken = await signRoomAccessToken(expected)
+      return {
+        accessToken,
+        room: { id: room.id, name: room.name },
+      }
+    } catch {
+      // fall through to password
+    }
+  }
+
+  if (!body.password) {
+    throw createError({ statusCode: 401, statusMessage: 'Password required' })
+  }
+
+  const valid = await bcrypt.compare(body.password, room.passwordHash)
+  if (!valid) {
+    throw createError({ statusCode: 401, statusMessage: 'Invalid password' })
+  }
+
+  const accessToken = await signRoomAccessToken(expected)
+  return {
+    accessToken,
+    room: { id: room.id, name: room.name },
+  }
+})