Use MeshDB Creds in query form

src/components/QueryForm/QueryForm.tsx

@@ -1,6 +1,6 @@
 "use client";
 
-import { submitQueryForm } from "@/lib/api";
+import { checkIfLoggedIn, submitQueryForm } from "@/lib/api";
 import { QueryFormInput, QueryFormResponse } from "@/lib/io";
 import Button from "@mui/material/Button";
 import { toastErrorMessage } from "@/components/toastErrorMessage";
@@ -44,6 +44,17 @@ export function QueryForm() {
     showIsDeveloperDialog();
   }
 
+  async function redirectToLoginIfNecessary() {
+    const loggedIn = await checkIfLoggedIn();
+    console.log(`logged in: ${loggedIn}`);
+
+    if (!loggedIn) {
+      const api_base = new URL(`${await getMeshDBAPIEndpoint()}/api/v1/`);
+      // Not ideal to redirect back to mesh homepage.
+      window.location.href = new URL("/auth/login?next=/", api_base);
+    }
+  }
+
   function parseForm(event: FormEvent<HTMLFormElement>) {
     const formData = new FormData(event.currentTarget);
     const data: Record<string, string | Blob> = {};
@@ -54,6 +65,7 @@ export function QueryForm() {
     return QueryFormInput.parse(data);
   }
 
+  // TODO: Check if we need to log in the user
   async function sendForm(event: FormEvent<HTMLFormElement>) {
     // Clear previous query results
     setLegacyQueryResults([]);
@@ -90,7 +102,6 @@ export function QueryForm() {
         route,
         queryForm.query_type,
         queryForm.data,
-        queryForm.password,
       );
       console.log("response is:");
       console.log(resp);
@@ -231,6 +242,8 @@ export function QueryForm() {
     },
   };
 
+  redirectToLoginIfNecessary();
+
   return (
     <>
       <div className={styles.formBody}>
@@ -252,12 +265,6 @@ export function QueryForm() {
           />
           <div className={styles.horizontal}>
             <input type="text" name="data" placeholder={queryLabel} required />
-            <input
-              type="password"
-              name="password"
-              placeholder="Password"
-              required
-            />
           </div>
           <div className={styles.centered}>
             <label>

src/lib/api.ts

@@ -6,6 +6,7 @@ import {
 } from "@/lib/io";
 import { z } from "zod";
 import { getMeshDBAPIEndpoint } from "./endpoint";
+import { parse } from "path";
 
 const get = async <S extends z.Schema>(
   url: string,
@@ -15,51 +16,33 @@ const get = async <S extends z.Schema>(
 ): Promise<ReturnType<S["parse"]>> => {
   const api_base = new URL(`${await getMeshDBAPIEndpoint()}/api/v1/`);
   const res = await fetch(new URL(url, api_base), {
-    headers: {
-      ...(auth && { Authorization: `Bearer ${auth}` }),
-    },
+    credentials: "include",
     next: nextOptions,
   }).catch(console.warn);
   if (!res?.ok) throw res;
   return schema.parse(await res.json());
 };
 
-const post = async <S extends z.Schema>(
-  url: string,
-  schema: S,
-  input: unknown,
-  auth?: string,
-  method = "POST",
-): Promise<ReturnType<S["parse"]>> => {
-  console.log("Will POST: " + input);
-  const api_base = new URL(`${await getMeshDBAPIEndpoint()}/api/v1/`);
-  const res = await fetch(new URL(url, api_base), {
-    method,
-    headers: {
-      "Content-Type": "application/json",
-      ...(auth && { Authorization: `Bearer ${auth}` }),
-    },
-    body: JSON.stringify(input),
-  }).catch(console.warn);
-  if (!res?.ok) throw res;
-  return schema.parse(await res.json());
-};
-
-export const submitNNAssignForm = (input: NNAssignFormInput) =>
-  post(
-    `/api/v1/nn-assign/`,
-    NNAssignFormResponse,
-    NNAssignFormInput.parse(input),
-  );
-
-export const submitQueryForm = (
+export const submitQueryForm = async (
   route: string,
   input_type: string,
   input: string,
-  password: string,
-) =>
-  get(
-    `/api/v1/query/${route}/?${input_type}=${input}`,
-    QueryFormResponse,
-    password,
-  );
+) => get(`/api/v1/query/${route}/?${input_type}=${input}`, QueryFormResponse);
+
+
+// FIXME (wdn): This is terrible. It won't work for members who have meshdb accounts
+// but don't have permission to use this-or-that form.
+export const checkIfLoggedIn = async () => {
+  // Check if we're logged in
+  const api_base = new URL(`${await getMeshDBAPIEndpoint()}/api/v1/`);
+  const checkAuthedRoute = await fetch(new URL("/api/v1/nodes/3", api_base), {
+    credentials: "include",
+  });
+  if (checkAuthedRoute.ok) {
+    return true;
+  }
+
+  if (checkAuthedRoute.status === 403) {
+    return false;
+  }
+};

src/lib/io.ts

@@ -2,7 +2,7 @@ import { z } from "zod";
 
 export const NNAssignFormInput = z.object({
   install_number: z.number(),
-  password: z.string(), // TODO: Salt/hash/whatever this
+  password: z.string(),
 });
 export type NNAssignFormInput = z.infer<typeof NNAssignFormInput>;
 
@@ -20,7 +20,6 @@ export const QueryFormInput = z.object({
   legacy: z.string().optional(),
   query_type: z.string(),
   data: z.string(),
-  password: z.string(), // TODO: Salt/hash/whatever this
 });
 export type QueryFormInput = z.infer<typeof QueryFormInput>;