Something went wrong. Try again.
a tool for shared writing and social publishing
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127"use server";import { drizzle } from "drizzle-orm/node-postgres";import { email_auth_tokens, identities, permission_token_on_homepage, poll_votes_on_entity,} from "drizzle/schema";import { and, eq, isNull } from "drizzle-orm";import { cookies } from "next/headers";import { redirect } from "next/navigation";import { pool } from "supabase/pool";import { supabaseServerClient } from "supabase/serverClient";import { linkOrphanedEmailSubscribers } from "src/utils/linkOrphanedEmailSubscribers";
export async function loginWithEmailToken( localLeaflets: { token: { id: string }; added_at: string }[],) { const client = await pool.connect(); const db = drizzle(client); let token_id = (await cookies()).get("auth_token")?.value; let voter_token = (await cookies()).get("poll_voter_token")?.value; if (!token_id) return null; let result = await db.transaction(async (tx) => { let [token] = await tx .select() .from(email_auth_tokens) .where( and( eq(email_auth_tokens.id, token_id), eq(email_auth_tokens.confirmed, true), ), ); if (!token || !token.email) return null; if (token.identity) { let id = token.identity; if (localLeaflets.length > 0) await tx .insert(permission_token_on_homepage) .values( localLeaflets.map((l) => ({ identity: id, token: l.token.id, })), ) .onConflictDoNothing(); return token; } let [existingIdentity] = await tx .select() .from(identities) .where(eq(identities.email, token.email));
let identity = existingIdentity; let newlyOwnedEmail = false; if (!existingIdentity) { let identityCookie = (await cookies()).get("identity"); if (identityCookie) { let [existingIdentityFromCookie] = await tx .select() .from(identities) .where( and( eq(identities.id, identityCookie.value), isNull(identities.email), ), ); if (existingIdentityFromCookie) { await tx .update(identities) .set({ email: token.email }) .where(eq(identities.id, existingIdentityFromCookie.id)); identity = existingIdentityFromCookie; newlyOwnedEmail = true; } } else { const { data: newIdentity } = await supabaseServerClient .from("identities") .insert({ email: token.email }) .select() .single(); identity = newIdentity!; newlyOwnedEmail = true; } }
if (newlyOwnedEmail && identity) { await linkOrphanedEmailSubscribers(identity.id, token.email); }
await tx .update(email_auth_tokens) .set({ identity: identity.id }) .where(eq(email_auth_tokens.id, token_id));
if (localLeaflets.length > 0) await tx .insert(permission_token_on_homepage) .values( localLeaflets.map((l) => ({ identity: identity.id, token: l.token.id, })), ) .onConflictDoNothing();
return token; }); if (result?.identity) { if (result.identity !== voter_token) { if (voter_token) await db .update(poll_votes_on_entity) .set({ voter_token: result.identity }) .where(eq(poll_votes_on_entity.voter_token, voter_token));
(await cookies()).set("poll_voter_token", result.identity, { maxAge: 60 * 60 * 24 * 365, secure: process.env.NODE_ENV === "production", httpOnly: true, sameSite: "lax", }); } } client.release();}