Neah/app/api/mail/login/route.ts
2025-04-17 13:26:35 +02:00

118 lines
3.0 KiB
TypeScript

import { NextResponse } from 'next/server';
import Imap from 'imap';
import { cookies } from 'next/headers';
interface StoredCredentials {
email: string;
password: string;
host: string;
port: number;
}
export async function POST(request: Request) {
try {
const { email, password, host, port } = await request.json();
if (!email || !password || !host || !port) {
return NextResponse.json(
{ error: 'Missing required fields' },
{ status: 400 }
);
}
// Test IMAP connection
const imap = new Imap({
user: email,
password,
host,
port: parseInt(port),
tls: true,
tlsOptions: {
rejectUnauthorized: false,
servername: host
},
authTimeout: 10000,
connTimeout: 10000,
debug: console.log
});
return new Promise((resolve, reject) => {
imap.once('ready', () => {
imap.end();
// Store credentials in cookie
const cookieStore = cookies();
const credentials: StoredCredentials = {
email,
password,
host,
port: parseInt(port)
};
// Set the cookie with proper security options
cookieStore.set('imap_credentials', JSON.stringify(credentials), {
httpOnly: true,
secure: process.env.NODE_ENV === 'production',
sameSite: 'lax',
path: '/',
maxAge: 30 * 24 * 60 * 60 // 30 days
});
resolve(NextResponse.json({ success: true }));
});
imap.once('error', (err: Error) => {
imap.end();
if (err.message.includes('Invalid login or password')) {
reject(new Error('Invalid login or password'));
} else {
reject(new Error(`IMAP connection error: ${err.message}`));
}
});
imap.connect();
});
} catch (error) {
console.error('Error in login handler:', error);
if (error instanceof Error) {
if (error.message.includes('Invalid login or password')) {
return NextResponse.json(
{ error: 'Invalid login or password', details: error.message },
{ status: 401 }
);
}
return NextResponse.json(
{ error: 'Failed to connect to email server', details: error.message },
{ status: 500 }
);
}
return NextResponse.json(
{ error: 'Unknown error occurred' },
{ status: 500 }
);
}
}
export async function GET() {
const cookieStore = cookies();
const credentialsCookie = cookieStore.get('imap_credentials');
if (!credentialsCookie?.value) {
return NextResponse.json(
{ error: 'No stored credentials found' },
{ status: 404 }
);
}
try {
const credentials = JSON.parse(credentialsCookie.value);
// Return credentials without password for security
const { password, ...safeCredentials } = credentials;
return NextResponse.json(safeCredentials);
} catch (error) {
return NextResponse.json(
{ error: 'Invalid credentials format' },
{ status: 400 }
);
}
}