admin: Add entry token verification

app.config.ts

@@ -1,4 +1,6 @@
 export default defineAppConfig({
+  appHomeBase: 'https://mzg.fan/',
+
   backendBase: 'https://api.mzg.fan/v1',
   backendProjectId: '649758e1eb1fa584a04d',
 

packages/admin/app.vue

@@ -0,0 +1,13 @@
+<template>
+  <div />
+</template>
+
+<script setup lang="ts">
+const route = useRoute()
+
+if (route.query.entrytoken) {
+  const entryRouteQueries = { ...route.query }
+  delete entryRouteQueries.entrytoken
+  await navigateTo({ path: route.path, query: entryRouteQueries })
+}
+</script>

packages/admin/middleware/entry.global.ts

@@ -0,0 +1,38 @@
+import { Client, Databases, Query } from 'node-appwrite'
+
+export default defineNuxtRouteMiddleware(async (to) => {
+  if (process.client) { return }
+
+  const entryTokenQuery = to.query.entrytoken
+  const entryTokenCookie = useCookie('admin_entry_token')
+  let entryToken = entryTokenQuery ?? entryTokenCookie.value
+  if (!String(entryToken).match(/[A-Za-z0-9]{32}/)) { entryToken = null }
+
+  function returnToHome () {
+    return navigateTo(useAppConfig().appHomeBase, { external: true })
+  }
+
+  const backendClient = new Client()
+  const backendDatabases = new Databases(backendClient)
+  backendClient.setEndpoint(useAppConfig().backendBase)
+    .setProject(useAppConfig().backendProjectId)
+    .setKey(useRuntimeConfig().backendApiKey)
+
+  if (entryToken) {
+    const entryTokenMatches = (await backendDatabases.listDocuments(
+      'admin',
+      'entry-tokens',
+      [
+        Query.equal('token', [String(entryToken)]),
+        Query.equal('valid', [true])
+      ]
+    )).total
+    if (entryTokenMatches) {
+      entryTokenCookie.value = String(entryToken)
+    } else {
+      returnToHome()
+    }
+  } else {
+    returnToHome()
+  }
+})