Files
weeklyreport/backend/api/auth/login.post.ts
2026-01-04 20:58:47 +09:00

86 lines
2.5 KiB
TypeScript

import { query, insertReturning, execute } from '../../utils/db'
import { getClientIp } from '../../utils/ip'
interface LoginBody {
email: string
name: string
}
/**
* 이메일+이름 로그인 (임시)
* POST /api/auth/login
*/
export default defineEventHandler(async (event) => {
const body = await readBody<LoginBody>(event)
const clientIp = getClientIp(event)
if (!body.email || !body.name) {
throw createError({ statusCode: 400, message: '이메일과 이름을 입력해주세요.' })
}
// 이메일 형식 검증
const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
if (!emailRegex.test(body.email)) {
throw createError({ statusCode: 400, message: '올바른 이메일 형식이 아닙니다.' })
}
const emailLower = body.email.toLowerCase()
const nameTrimmed = body.name.trim()
// 기존 직원 조회
let employee = await query<any>(`
SELECT * FROM wr_employee_info WHERE employee_email = $1
`, [emailLower])
let employeeData = employee[0]
if (employeeData) {
// 기존 직원 - 이름이 다르면 업데이트
if (employeeData.employee_name !== nameTrimmed) {
await execute(`
UPDATE wr_employee_info
SET employee_name = $1, updated_at = NOW(), updated_ip = $2, updated_email = $3
WHERE employee_id = $4
`, [nameTrimmed, clientIp, emailLower, employeeData.employee_id])
employeeData.employee_name = nameTrimmed
}
} else {
// 신규 직원 자동 등록
employeeData = await insertReturning(`
INSERT INTO wr_employee_info (employee_name, employee_email, created_ip, created_email, updated_ip, updated_email)
VALUES ($1, $2, $3, $2, $3, $2)
RETURNING *
`, [nameTrimmed, emailLower, clientIp])
}
// 로그인 이력 추가
const loginHistory = await insertReturning(`
INSERT INTO wr_login_history (employee_id, login_ip, login_email)
VALUES ($1, $2, $3)
RETURNING history_id
`, [employeeData.employee_id, clientIp, emailLower])
// 쿠키에 사용자 정보 저장
setCookie(event, 'user_id', String(employeeData.employee_id), {
httpOnly: true,
maxAge: 60 * 60 * 24 * 7,
path: '/'
})
setCookie(event, 'login_history_id', String(loginHistory.history_id), {
httpOnly: true,
maxAge: 60 * 60 * 24 * 7,
path: '/'
})
return {
success: true,
user: {
employeeId: employeeData.employee_id,
employeeName: employeeData.employee_name,
employeeEmail: employeeData.employee_email,
employeePosition: employeeData.employee_position
}
}
})