add invite system

scripts/gen-invite.js

···
+import { Database } from "bun:sqlite";
+
+const db = new Database("readit.db", {
+	strict: true,
+});
+
+// Create the invites table if it doesn't exist
+db.run(`
+	CREATE TABLE IF NOT EXISTS invites (
+		id INTEGER PRIMARY KEY AUTOINCREMENT,
+		token TEXT NOT NULL,
+		createdAt TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+		usedAt TIMESTAMP
+	)
+`);
+
+// Generate a new invite token
+function generateInviteToken() {
+	const hasher = new Bun.CryptoHasher("sha256", "super-secret-invite-key");
+	return hasher.update(Math.random().toString()).digest("hex");
+}
+
+// Store the token in the database
+function createInvite() {
+	const token = generateInviteToken();
+	db.run("INSERT INTO invites (token) VALUES ($token)", { token });
+	console.log(`Invite token created: ${token}`);
+}
+
+// CLI usage
+const command = process.argv[2];
+const arg = process.argv[3];
+
+if (command === "create") {
+	createInvite();
+} else {
+	console.log("requires an arg");
+}

src/invite.js

···
+const { db } = require("./db");
+
+const validateInviteToken = async (req, res, next) => {
+	const token = req.query.token;
+
+	if (!token) {
+		return res.render("register", {
+			message: "this instance requires an invite",
+			isDisabled: true,
+		});
+	}
+
+	const invite = db
+		.query("SELECT * FROM invites WHERE token = $token AND usedAt IS null")
+		.get({ token });
+
+	if (!invite) {
+		return res.render("register", {
+			message: "this invite token is invalid",
+			isDisabled: true,
+		});
+	}
+
+	if (invite.usedAt) {
+		return res.render("register", {
+			message: "this invite has been claimed",
+			isDisabled: true,
+		});
+	}
+
+	req.invite = invite;
+	next();
+};
+
+module.exports = {
+	validateInviteToken,
+};

src/public/styles.css

···
   color: var(--bg-color);
 }
 
+.submit-button button:disabled {
+  width: 100%;
+  padding: 12px;
+  background-color: var(--bg-color-muted);
+  color: var(--text-color-muted);
+}
+
 .register-error-message {
   flex-flow: row wrap;
   color: var(--error-text-color);

src/routes/index.js

···
 const { JWT_KEY } = require("../");
 const { db } = require("../db");
 const { authenticateToken } = require("../auth");
+const { validateInviteToken } = require("../invite");
 
 const router = express.Router();
 const G = new geddit.Geddit();
···
 	res.render("media", { kind, url });
 });
 
-router.get("/register", async (req, res) => {
-	res.render("register");
+router.get("/register", validateInviteToken, async (req, res) => {
+	res.render("register", { isDisabled: false, token: req.query.token });
 });
 
-router.post("/register", async (req, res) => {
+router.post("/register", validateInviteToken, async (req, res) => {
 	const { username, password, confirm_password } = req.body;
 
 	if (!username || !password || !confirm_password) {
···
 
 	try {
 		const hashedPassword = await Bun.password.hash(password);
+
+		db.query("UPDATE invites SET usedAt = CURRENT_TIMESTAMP WHERE id = $id", {
+			id: req.invite.id,
+		});
+
 		const insertedRecord = db
 			.query(
 				"INSERT INTO users (username, password_hash) VALUES ($username, $hashedPassword)",
···
 			})
 			.redirect("/");
 	} catch (err) {
+		console.log(err);
 		return res.render("register", {
 			message: "error registering user, try again later",
 		});

src/views/register.pug

···
 include ../mixins/head
 
+- var action = "/register" + (token?`?token=${token}`:'')
 doctype html
 html
   +head("register")
···
       if message
         div.register-error-message
           | #{message}
-      form(action="/register" method="post")
+      form(action=`${action}` method="post")
         div.input-text
           label(for="username") username
           input(type="text" name="username" required)
···
           label(for="confirm_password") confirm password
           input(type="password" name="confirm_password" required)
         div.submit-button
-          button(type="submit") register
+          if isDisabled
+            button(type="submit" disabled) register'nt :(
+          else
+            button(type="submit") register
         div
           p 
             | already have an account?