From 70e23b8878cc3e7521ab43f91d8fbe2baa460502 Mon Sep 17 00:00:00 2001
From: Sean Morley <zipsm15@gmail.com>
Date: Wed, 10 Apr 2024 23:34:48 +0000
Subject: [PATCH] Update visit count and password hashing

---
 src/routes/api/visitcount/+server.ts |  2 --
 src/routes/settings/+page.server.ts  | 13 +++++++++++++
 src/routes/settings/+page.svelte     | 10 +++++++++-
 3 files changed, 22 insertions(+), 3 deletions(-)

diff --git a/src/routes/api/visitcount/+server.ts b/src/routes/api/visitcount/+server.ts
index f5550cf..7d28582 100644
--- a/src/routes/api/visitcount/+server.ts
+++ b/src/routes/api/visitcount/+server.ts
@@ -20,8 +20,6 @@ export async function GET(event: RequestEvent): Promise<Response> {
       .where(eq(userVisitedAdventures.userId,event.locals.user.id))
       .execute();
 
-      console.log(result[0].count);
-
     return new Response(
       JSON.stringify({
         visitCount: result[0].count,
diff --git a/src/routes/settings/+page.server.ts b/src/routes/settings/+page.server.ts
index 4430ca7..dc603db 100644
--- a/src/routes/settings/+page.server.ts
+++ b/src/routes/settings/+page.server.ts
@@ -3,6 +3,7 @@ import type { PageServerLoad } from "./$types";
 import { db } from "$lib/db/db.server";
 import { userTable } from "$lib/db/schema";
 import { eq } from "drizzle-orm";
+import { Argon2id } from "oslo/password";
 
 export const load: PageServerLoad = async (event) => {
   if (event.locals.user)
@@ -20,6 +21,8 @@ export const actions: Actions = {
     let firstName = formData.get("first_name");
     let lastName = formData.get("last_name");
 
+    let password = formData.get("password");
+
     if (!userId) {
         return {
             status: 400,
@@ -29,6 +32,16 @@ export const actions: Actions = {
         };
     }
 
+    if (password) {
+        let hashedPassword = await new Argon2id().hash(password);
+        console.log(hashedPassword)
+        await db.update(userTable)
+            .set({
+                hashed_password: hashedPassword
+            })
+            .where(eq(userTable.id, userId));
+    }
+
     await db.update(userTable)
         .set({
             username: username,
diff --git a/src/routes/settings/+page.svelte b/src/routes/settings/+page.svelte
index 139b498..8e2fdee 100644
--- a/src/routes/settings/+page.svelte
+++ b/src/routes/settings/+page.svelte
@@ -21,7 +21,7 @@
             id="username"
             class="block mb-2 input input-bordered w-full max-w-xs"
         /><br />
-        <label for="password">First Name</label>
+        <label for="first_name">First Name</label>
         <input
             type="text"
             bind:value={first_name}
@@ -29,6 +29,7 @@
             id="first_name"
             class="block mb-2 input input-bordered w-full max-w-xs"
         /><br />
+        <label for="last_name">Last Name</label>
         <input
             type="text"
             bind:value={last_name}
@@ -36,6 +37,13 @@
             id="last_name"
             class="block mb-2 input input-bordered w-full max-w-xs"
         /><br />
+        <label for="password">Password</label>
+        <input
+            type="password"
+            name="password"
+            id="password"
+            class="block mb-2 input input-bordered w-full max-w-xs"
+        /><br />
         <!--  make hidden input where the user id is -->
         <input
             type="hidden"