Changeset c80e78b in Klonkt for src/routes/account.js

Timestamp:

06/14/2026 04:39:57 AM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

ae924a2

Parents:

89d6536

Message:

auth: replace username/password with Google login

Listeners (and the owner) now log in via Google instead of a local
username/password account. This lowers the barrier to commenting and
removes the home-built password/registration system.

• src/config/google.js: raw OAuth2 helpers (authorize/token/userinfo) via the built-in fetch, config-driven. Boot keeps working without credentials.
• src/routes/auth.js: /auth/google + /auth/google/callback (find-or-create user on email, ADMIN_EMAIL -> god, set session). login/register/reset POST handlers removed; /login now shows the Google button.
• database.js: idempotent column users.google_sub.
• account.js + account.ejs: change-password removed.
• auth-login.ejs / welcome.ejs: Google button instead of password form.
• shared-styles.ejs: .btn-google styling.
• .env.example: GOOGLE_CLIENT_ID/SECRET/REDIRECT_URI + ADMIN_EMAIL.

Existing users are matched on email (owner retains their site).
DO NOT deploy to roboburr until the Google credentials are in .env, otherwise
the owner locks themselves out.

Co-Authored-By: Claude <noreply@…>

File:

• src/routes/account.js (modified) (2 diffs)

src/routes/account.js

@@ -17 +17 @@
 import fs from 'fs';
 import { fileURLToPath } from 'url';
-import bcrypt from 'bcryptjs';
 import multer from 'multer';
 import { v4 as uuid } from 'uuid';
@@ -84 +83 @@
 // longer read or written.
 
-// ==================== CHANGE PASSWORD ====================
-router.post('/password', requireAuth, (req, res) => {
-  const { current, new_password, confirm } = req.body;
-  if (!current || !new_password || !confirm) {
-    return res.redirect('/account?error=' + encodeURIComponent('All password fields required'));
-  }
-  if (new_password.length < 8) {
-    return res.redirect('/account?error=' + encodeURIComponent('New password must be at least 8 characters'));
-  }
-  if (new_password !== confirm) {
-    return res.redirect('/account?error=' + encodeURIComponent('New passwords do not match'));
-  }
-
-  const row = db.prepare('SELECT password_hash FROM users WHERE id = ?').get(req.session.user.id);
-  if (!row || !bcrypt.compareSync(current, row.password_hash)) {
-    return res.redirect('/account?error=' + encodeURIComponent('Current password is incorrect'));
-  }
-
-  const newHash = bcrypt.hashSync(new_password, 10);
-  db.prepare('UPDATE users SET password_hash = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?')
-    .run(newHash, req.session.user.id);
-
-  res.redirect('/account?success=' + encodeURIComponent('Password changed'));
-});
+// Wachtwoord-wijzigen is verwijderd: inloggen gaat sinds de Google-OAuth-migratie
+// volledig via Google, er is geen wachtwoord meer om te wijzigen.
 
 // ==================== UPLOAD AVATAR ====================