feat: implement sensor connection endpoint and add pending tokens route

realtime/src/routes/connect.js

@@ -1,8 +1,12 @@
 const router = require('express').Router();
 const db = require('../store/db');
+const { appendAsConnection, createConnectionToken } = require('../store/redis');
 const crypto = require('crypto');
 
-router.post('/connect/new', async (req, res) => {
+/**
+ * Aggiunge un nuovo sensore autorizzato a partire da un nome univoco e un codice che verrà salvato in forma hashata.
+ */
+router.post('/new', async (req, res) => {
     const { name, code } = req.body;
 
     if (!name || !code) {
@@ -32,4 +36,38 @@ router.post('/connect/new', async (req, res) => {
     }
 });
 
+router.post('/', async (req, res) => {
+    const { name, code } = req.body;
+
+    if (!name || !code) {
+        return res.status(400).json({ error: 'name and code required' });
+    }
+
+    try {
+        const result = await db.query('sensors',
+            'SELECT code_hash FROM sensors WHERE name = $1',
+            [name]
+        );
+
+        if (result.rows.length === 0) {
+            return res.status(401).json({ error: 'invalid name or code' });
+        }
+
+        const [salt, storedHash] = result.rows[0].code_hash.split(':');
+        const hash = crypto.scryptSync(code, salt, 64).toString('hex');
+
+        if (hash !== storedHash) {
+            return res.status(401).json({ error: 'invalid name or code' });
+        }
+
+        await appendAsConnection(name, 'pending', new Date().toISOString());
+        const token = await createConnectionToken(name);
+
+        res.status(200).json({ s: 'ok', t: token });
+    } catch (err) {
+        console.error('Error verifying connection', err);
+        res.status(500).json({ error: 'internal server error' });
+    }
+});
+
 module.exports = router;

realtime/src/routes/sensors.js

@@ -1,7 +1,7 @@
 const router = require('express').Router();
 const db = require('../store/db');
 
-router.get('/sensors', async (req, res) => {
+router.get('/', async (req, res) => {
     try {
         const result = await db.query('SELECT id, name FROM sensors', [], 'sensors');
         res.json(result.rows);
@@ -11,4 +11,20 @@ router.get('/sensors', async (req, res) => {
     }
 });
 
+router.get('/:id', async (req, res) => {
+    const { id } = req.params;
+    try {
+        const result = await db.query('SELECT id, name FROM sensors WHERE id = $1', [id], 'sensors');
+        if (result.rows.length === 0) {
+            return res.status(404).json({ error: 'sensor not found' });
+        }
+        res.json(result.rows[0]);
+    } catch (err) {
+        console.error('Error fetching sensor', err);
+        res.status(500).json({ error: 'internal server error' });
+    }
+});
+
+
+
 module.exports = router;

realtime/src/routes/sessions.js

@@ -0,0 +1,15 @@
+const router = require('express').Router();
+const db = require('../store/db');
+const { query } = require('../store/redis');
+
+router.get('/pendingtokens', (req, res) => {
+    try {
+        const pendingTokens = queryAll('snsr_pending_token');
+        res.json(pendingTokens);
+    } catch (err) {
+        console.error('Error fetching pending tokens', err);
+        res.status(500).json({ error: 'internal server error' });
+    }
+});
+
+module.exports = router;