Add admin login/logout with session-based auth

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Add admin login/logout with session-based auth
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
a36f12f5 · tdgiang · a1400904 · a36f12f5 · a36f12f5 · a36f12f5
Commit a36f12f5 authored Aug 29, 2026 by tdgiang
Showing with 132 additions and 0 deletions

adminAuth.server.controller.js app/controllers/adminAuth.server.controller.js +35 -0

admin.server.routes.js app/routes/admin.server.routes.js +8 -0

login.server.view.html app/views/admin/login.server.view.html +89 -0

No files found.
--- a/app/controllers/adminAuth.server.controller.js
+++ b/app/controllers/adminAuth.server.controller.js
+"use strict";
+var AdminUser = require("../models/AdminUser");
+var passwordHash = require("../libs/passwordHash");
+
+exports.loginForm = function (req, res) {
+  res.render("admin/login", { error: null });
+};
+
+exports.login = function (req, res) {
+  var username = String(req.body.username || "").trim().toLowerCase();
+  var password = String(req.body.password || "");
+
+  AdminUser.findOne({ username: username }, function (err, user) {
+    if (err) {
+      console.error("login: DB error:", err.message);
+      return res.status(503).render("admin/login", { error: "Hệ thống đang bận, vui lòng thử lại sau" });
+    }
+    if (!user || !passwordHash.compare(password, user.passwordHash)) {
+      return res.render("admin/login", { error: "Sai tên đăng nhập hoặc mật khẩu" });
+    }
+    if (!user.active) {
+      return res.render("admin/login", { error: "Tài khoản đã bị khoá, liên hệ admin" });
+    }
+    req.session.userId = user._id.toString();
+    req.session.username = user.username;
+    req.session.role = user.role;
+    return res.redirect("/admin/transactions");
+  });
+};
+
+exports.logout = function (req, res) {
+  req.session.destroy(function () {
+    res.redirect("/admin/login");
+  });
+};
--- a/app/routes/admin.server.routes.js
+++ b/app/routes/admin.server.routes.js
@@ -2,6 +2,14 @@
 module.exports = function (app) {
  var admin = require("../../app/controllers/admin.server.controller");
  var basicAuth = require("../middlewares/basicAuth");
+  var adminAuth = require("../../app/controllers/adminAuth.server.controller");
+  var requireLogin = require("../middlewares/requireLogin");
+
+  app.route("/admin/login")
+    .get(adminAuth.loginForm)
+    .post(adminAuth.login);
+
+  app.route("/admin/logout").post(requireLogin, adminAuth.logout);

  app.route("/admin/transactions")
    .get(basicAuth, admin.listTransactions)

--- a/app/views/admin/login.server.view.html
+++ b/app/views/admin/login.server.view.html
+<!DOCTYPE html>
+<html lang="vi">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Đăng nhập</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <style>
+    :root {
+      --color-bg: #F1F5F9;
+      --color-surface: #FFFFFF;
+      --color-primary: #1E40AF;
+      --color-primary-hover: #1D4ED8;
+      --color-text: #0F172A;
+      --color-text-muted: #64748B;
+      --color-border: #E2E8F0;
+      --color-danger: #DC2626;
+      --color-danger-bg: #FEF2F2;
+      --color-danger-border: #FECACA;
+      --radius: 10px;
+      --shadow-card: 0 1px 2px rgba(15, 23, 42, 0.04), 0 8px 24px rgba(15, 23, 42, 0.06);
+    }
+    * { box-sizing: border-box; }
+    body {
+      margin: 0;
+      min-height: 100vh;
+      background: var(--color-bg);
+      font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
+      color: var(--color-text);
+      display: flex;
+      justify-content: center;
+      align-items: center;
+      padding: 20px;
+    }
+    .card {
+      width: 100%;
+      max-width: 380px;
+      background: var(--color-surface);
+      border: 1px solid var(--color-border);
+      border-radius: var(--radius);
+      box-shadow: var(--shadow-card);
+      padding: 32px;
+    }
+    h1 { font-size: 20px; font-weight: 700; letter-spacing: -0.01em; margin: 0 0 4px; text-align: center; }
+    .subtitle { font-size: 14px; color: var(--color-text-muted); margin: 0 0 24px; text-align: center; }
+    .field { margin-bottom: 16px; }
+    label { display: block; font-size: 13px; font-weight: 600; margin-bottom: 6px; }
+    input {
+      width: 100%; height: 44px; padding: 0 14px; font-size: 15px; font-family: inherit;
+      border: 1px solid var(--color-border); border-radius: 8px; outline: none;
+      transition: border-color 150ms ease, box-shadow 150ms ease;
+    }
+    input:focus { border-color: var(--color-primary); box-shadow: 0 0 0 3px rgba(30, 64, 175, 0.12); }
+    button {
+      width: 100%; height: 46px; margin-top: 8px; background: var(--color-primary); color: #fff;
+      font-family: inherit; font-size: 15px; font-weight: 600; border: none; border-radius: 8px;
+      cursor: pointer; transition: background 150ms ease;
+    }
+    button:hover { background: var(--color-primary-hover); }
+    .alert-error {
+      display: flex; gap: 8px; padding: 12px 14px; margin-bottom: 16px;
+      background: var(--color-danger-bg); border: 1px solid var(--color-danger-border);
+      border-radius: 8px; font-size: 13.5px; color: #7F1D1D;
+    }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Đăng nhập</h1>
+    <p class="subtitle">Hệ thống quản lý giao dịch</p>
+    {% if error %}
+    <div class="alert-error">{{error}}</div>
+    {% endif %}
+    <form method="POST" action="/admin/login">
+      <div class="field">
+        <label for="username">Tên đăng nhập</label>
+        <input type="text" id="username" name="username" autocomplete="username" required autofocus>
+      </div>
+      <div class="field">
+        <label for="password">Mật khẩu</label>
+        <input type="password" id="password" name="password" autocomplete="current-password" required>
+      </div>
+      <button type="submit">Đăng nhập</button>
+    </form>
+  </div>
+</body>
+</html>