Skip to content

H
haiyen-payment
Commit a36f12f5 by tdgiang
Options

Add admin login/logout with session-based auth 

Co-Authored-By: 's avatarClaude Sonnet 5 <noreply@anthropic.com>
parent a1400904
Showing with 132 additions and 0 deletions
app/controllers/adminAuth.server.controller.js 0 → 100644
"use strict";
var AdminUser = require("../models/AdminUser");
var passwordHash = require("../libs/passwordHash");
exports.loginForm = function (req, res) {
res.render("admin/login", { error: null });
};
exports.login = function (req, res) {
var username = String(req.body.username || "").trim().toLowerCase();
var password = String(req.body.password || "");
AdminUser.findOne({ username: username }, function (err, user) {
if (err) {
console.error("login: DB error:", err.message);
return res.status(503).render("admin/login", { error: "Hệ thống đang bận, vui lòng thử lại sau" });
}
if (!user || !passwordHash.compare(password, user.passwordHash)) {
return res.render("admin/login", { error: "Sai tên đăng nhập hoặc mật khẩu" });
}
if (!user.active) {
return res.render("admin/login", { error: "Tài khoản đã bị khoá, liên hệ admin" });
}
req.session.userId = user._id.toString();
req.session.username = user.username;
req.session.role = user.role;
return res.redirect("/admin/transactions");
});
};
exports.logout = function (req, res) {
req.session.destroy(function () {
res.redirect("/admin/login");
});
};
app/routes/admin.server.routes.js
...@@ -2,6 +2,14 @@ ...@@ -2,6 +2,14 @@
module.exports = function (app) { module.exports = function (app) {
var admin = require("../../app/controllers/admin.server.controller"); var admin = require("../../app/controllers/admin.server.controller");
var basicAuth = require("../middlewares/basicAuth"); var basicAuth = require("../middlewares/basicAuth");
var adminAuth = require("../../app/controllers/adminAuth.server.controller");
var requireLogin = require("../middlewares/requireLogin");
app.route("/admin/login")
.get(adminAuth.loginForm)
.post(adminAuth.login);
app.route("/admin/logout").post(requireLogin, adminAuth.logout);
app.route("/admin/transactions") app.route("/admin/transactions")
.get(basicAuth, admin.listTransactions) .get(basicAuth, admin.listTransactions)
......
app/views/admin/login.server.view.html 0 → 100644
<!DOCTYPE html>
<html lang="vi">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Đăng nhập</title>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
<style>
:root {
--color-bg: #F1F5F9;
--color-surface: #FFFFFF;
--color-primary: #1E40AF;
--color-primary-hover: #1D4ED8;
--color-text: #0F172A;
--color-text-muted: #64748B;
--color-border: #E2E8F0;
--color-danger: #DC2626;
--color-danger-bg: #FEF2F2;
--color-danger-border: #FECACA;
--radius: 10px;
--shadow-card: 0 1px 2px rgba(15, 23, 42, 0.04), 0 8px 24px rgba(15, 23, 42, 0.06);
}
* { box-sizing: border-box; }
body {
margin: 0;
min-height: 100vh;
background: var(--color-bg);
font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
color: var(--color-text);
display: flex;
justify-content: center;
align-items: center;
padding: 20px;
}
.card {
width: 100%;
max-width: 380px;
background: var(--color-surface);
border: 1px solid var(--color-border);
border-radius: var(--radius);
box-shadow: var(--shadow-card);
padding: 32px;
}
h1 { font-size: 20px; font-weight: 700; letter-spacing: -0.01em; margin: 0 0 4px; text-align: center; }
.subtitle { font-size: 14px; color: var(--color-text-muted); margin: 0 0 24px; text-align: center; }
.field { margin-bottom: 16px; }
label { display: block; font-size: 13px; font-weight: 600; margin-bottom: 6px; }
input {
width: 100%; height: 44px; padding: 0 14px; font-size: 15px; font-family: inherit;
border: 1px solid var(--color-border); border-radius: 8px; outline: none;
transition: border-color 150ms ease, box-shadow 150ms ease;
}
input:focus { border-color: var(--color-primary); box-shadow: 0 0 0 3px rgba(30, 64, 175, 0.12); }
button {
width: 100%; height: 46px; margin-top: 8px; background: var(--color-primary); color: #fff;
font-family: inherit; font-size: 15px; font-weight: 600; border: none; border-radius: 8px;
cursor: pointer; transition: background 150ms ease;
}
button:hover { background: var(--color-primary-hover); }
.alert-error {
display: flex; gap: 8px; padding: 12px 14px; margin-bottom: 16px;
background: var(--color-danger-bg); border: 1px solid var(--color-danger-border);
border-radius: 8px; font-size: 13.5px; color: #7F1D1D;
}
</style>
</head>
<body>
<div class="card">
<h1>Đăng nhập</h1>
<p class="subtitle">Hệ thống quản lý giao dịch</p>
{% if error %}
<div class="alert-error">{{error}}</div>
{% endif %}
<form method="POST" action="/admin/login">
<div class="field">
<label for="username">Tên đăng nhập</label>
<input type="text" id="username" name="username" autocomplete="username" required autofocus>
</div>
<div class="field">
<label for="password">Mật khẩu</label>
<input type="password" id="password" name="password" autocomplete="current-password" required>
</div>
<button type="submit">Đăng nhập</button>
</form>
</div>
</body>
</html>
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment