From e8d6557e587d5affca54eab6b56ac5cb5230a978 Mon Sep 17 00:00:00 2001
From: suricata <tomas@suricatingss.xyz>
Date: Wed, 14 Jan 2026 17:31:53 +0000
Subject: [PATCH] login almost complete

---
 app/pages/index.vue                     |   2 -
 app/pages/login.vue                     |   3 +-
 nuxt.config.ts                          |   3 +
 server/fastapi_server/fastapi_server.py | 101 +++++++++++-------------
 server/routes/login.post.ts             |   7 +-
 5 files changed, 56 insertions(+), 60 deletions(-)

diff --git a/app/pages/index.vue b/app/pages/index.vue
index d392cc3..f9fdb1d 100644
--- a/app/pages/index.vue
+++ b/app/pages/index.vue
@@ -86,8 +86,6 @@
   background-clip: text;
   color: transparent;
 
-  /* optional glow */
-  /*filter: drop-shadow(0 0 10px rgba(255,255,255,.4));*/
 }
 
 @keyframes rgb {
diff --git a/app/pages/login.vue b/app/pages/login.vue
index 05dcdfe..ed14a5d 100644
--- a/app/pages/login.vue
+++ b/app/pages/login.vue
@@ -45,8 +45,7 @@ function onSubmit(payload: FormSubmitEvent<Schema>) {
       <UAuthForm
         :schema="schema"
         title="Login"
-        description="Enter your credentials to access your account."
-        icon="i-lucide-user"
+        icon="solar:shield-user-broken"
         :fields="fields"
         :submit="{
           label: 'Login',
diff --git a/nuxt.config.ts b/nuxt.config.ts
index cea445d..e166636 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -14,5 +14,8 @@ export default defineNuxtConfig({
   css: [ "@/assets/global.css" ],
   vite: {
     plugins: [ tailwindcss() ]
+  },
+  runtimeConfig: {
+    fastapi_url: "http://127.0.0.1:8001"
   }
 })
\ No newline at end of file
diff --git a/server/fastapi_server/fastapi_server.py b/server/fastapi_server/fastapi_server.py
index 808d9d1..19162f4 100644
--- a/server/fastapi_server/fastapi_server.py
+++ b/server/fastapi_server/fastapi_server.py
@@ -1,81 +1,72 @@
-from fastapi import FastAPI, HTTPException
-from pydantic import BaseModel
+from fastapi import FastAPI, HTTPException, Request, Response
+#from fastapi import Body, Cookie, File, Form, Header, Path, Query
 from typing import Optional
 import uvicorn
-import pymysql
-
-class mysql_params:
-    host = "127.0.0.1"
-    user = "yt2mp3_nuxt"
-    db = "yt2mp3_nuxt"
-    pwd = "ultratopsecret,bro"    
+import aiomysql
+import bcrypt
 
 app = FastAPI()
 
-class ConversionData(BaseModel):
-    input_value: str
-    conversion_type: str
+class db:
+    pool = None
 
-class LoginData(BaseModel):
-    username: str
-    password: str
+    host = "127.0.0.1"
+    user = "yt2mp3_nuxt"
+    db_name = "yt2mp3_nuxt"
+    pwd = "ultratopsecret,bro"  
 
-class MeData(BaseModel):
-    username: str
-    email: str
-    profile_picture: Optional[str] = None
+    @staticmethod
+    async def init_db_pool():
+        db.pool = await aiomysql.create_pool(db.host,db.user,db.pwd,db.db_name)
+   
+    @staticmethod
+    async def get_conn():
+        return db.pool.acquire()
 
 
 
+async def fetch_user_info(email: str):
+    async with await db.get_conn() as conn:
+        async with conn.cursor(aiomysql.DictCursor) as cur:
+            await cur.execute("SELECT * FROM users WHERE email = %s", (email,))
+            return await cur.fetchone()
+
 
 @app.post("/convert")
-async def convert_endpoint(data: ConversionData):
-    """
-    Converts an input value based on the specified conversion type.
-    """
-    # Dummy conversion logic
-    if data.conversion_type == "uppercase":
-        converted_value = data.input_value.upper()
-    elif data.conversion_type == "lowercase":
-        converted_value = data.input_value.lower()
-    else:
-        raise HTTPException(status_code=400, detail="Invalid conversion type")
-
-    return {"converted_value": converted_value}
+async def convert_endpoint(): pass
 
 
 @app.post("/login")
-async def login_endpoint(data: LoginData):
-    """
-    Verifies login credentials.
-    """
-    # Dummy verification logic
-    if data.username == "user" and data.password == "password":
-        return {"message": "Login successful"}
-    else:
-        raise HTTPException(status_code=401, detail="Invalid credentials")
+async def login_endpoint(req: Request, res: Response):
+    
+    body = await req.json()
+    if sorted(list(body.keys())) != sorted(["email","password"]):
+        # ensure it's only email and password
+        raise HTTPException(status_code=400)
+    try:
+        user_data = await fetch_user_info(body["email"])
+        if (user_data is None): 
+            raise HTTPException(status_code=401)
+        else:
+            pwd = user_data.get("password")
+            if (bcrypt.checkpw(body["password"].encode(), user_data.get("password").encode())):
+                return user_data
+            else:
+                raise HTTPException(status_code=401)
+    except KeyError:
+        raise HTTPException(status_code=400)
 
 
 @app.get("/me")
 async def me_get_endpoint():
     """
     Retrieves user profile data.
-    """
-    # Dummy user data
-    user_data = {
-        "username": "example_user",
-        "email": "user@example.com",
-        "profile_picture": "https://example.com/profile.jpg"
-    }
-    return user_data
 
-@app.post("/me")
-async def me_post_endpoint(data: MeData):
+    Trusts Nuxt's backend to allow it or not.
     """
-    Updates user profile data.
-    """
-    # Dummy update logic
-    return {"message": "Profile updated successfully", **data.dict()}
+
+    return await fetch_user_info()
+
 
 
 if __name__ == "__main__":
diff --git a/server/routes/login.post.ts b/server/routes/login.post.ts
index b92a764..07af227 100644
--- a/server/routes/login.post.ts
+++ b/server/routes/login.post.ts
@@ -1,7 +1,12 @@
 export default defineEventHandler(async (event) => {
+    const conf = useRuntimeConfig()
+    
     const body = await readBody(event)
 
-    const req = await fetch("http://127.0.0.1:99",
+    if ( !body.email || !body.password )
+        throw createError({ statusCode: 400, message: "Bad form. Use e-mail and password" })
+
+    const req = await fetch(conf.fastapi_url + "/login",
         {
             method: "POST",
             headers: {