@buildappolis/env-manager/src/pages/api/auth.ts

Enterprise-grade environment variable management system with encryption, snapshots, and validation

import type { APIRoute } from 'astro';
import { getDatabase } from '../../lib/session.js';

export const POST: APIRoute = async ({ request }) => {
  try {
    const database = getDatabase();
    const { password } = await request.json();

    if (!password) {
      return new Response(JSON.stringify({ error: 'Password required' }), {
        status: 400,
        headers: { 'Content-Type': 'application/json' }
      });
    }

    const isValid = database.authenticate(password);
    
    if (isValid) {
      return new Response(JSON.stringify({ 
        success: true, 
        message: 'Authentication successful' 
      }), {
        status: 200,
        headers: { 'Content-Type': 'application/json' }
      });
    } else {
      return new Response(JSON.stringify({ 
        error: 'Invalid password' 
      }), {
        status: 401,
        headers: { 'Content-Type': 'application/json' }
      });
    }
  } catch (error) {
    console.error('Auth error:', error);
    return new Response(JSON.stringify({ 
      error: 'Authentication failed' 
    }), {
      status: 500,
      headers: { 'Content-Type': 'application/json' }
    });
  }
};

export const GET: APIRoute = async () => {
  try {
    const database = getDatabase();
    const isAuthenticated = database.isAuthenticated();
    
    return new Response(JSON.stringify({ 
      authenticated: isAuthenticated 
    }), {
      status: 200,
      headers: { 'Content-Type': 'application/json' }
    });
  } catch (error) {
    console.error('Auth check error:', error);
    return new Response(JSON.stringify({ 
      authenticated: false 
    }), {
      status: 200,
      headers: { 'Content-Type': 'application/json' }
    });
  }
};