initial commit

server/api/login.post.ts

@@ -0,0 +1,14 @@
+const FAILED_LOGIN_DELAY_MS = 1000
+
+export default defineEventHandler(async (event) => {
+  const { password } = await readValidBody(event, loginSchema)
+
+  if (!(await passwordMatches(event, password))) {
+    await new Promise(resolve => setTimeout(resolve, FAILED_LOGIN_DELAY_MS))
+    throw createError({ statusCode: 401, statusMessage: 'Wrong password' })
+  }
+
+  const session = await diarySession(event)
+  await session.update({ unlocked: true })
+  return { unlocked: true }
+})