bugfixes in authentication after in memory database restructure

authority/server/db.js

@@ -82,7 +82,8 @@ exports.gotVerificationSecret = function(secret) {
     }
     g_users.push({
       emails: [ o.email ],
-      keys: [o.pubkey ]
+      keys: [ o.pubkey ],
+      pass: o.pass
     });
   } else if (o.type === 'add_email') {
     exports.addEmailToAccount(o.existing_email, o.email, o.pubkey);
@@ -95,7 +96,7 @@ exports.gotVerificationSecret = function(secret) {
 
 /* takes an argument object including email, pass, and pubkey. */
 exports.checkAuth = function(email, pass) {
-  console.log("e: " + email + " p: " + pass);
-  console.log(g_emails);
-  return (g_emails.hasOwnProperty(email) && g_emails[email].pass === pass);
+  var acct = exports.findByEmail(email);
+  if (acct === undefined) return false;
+  return pass === acct.pass;
 };

authority/server/run.js

@@ -29,7 +29,17 @@ exports.handler = function(request, response, serveFile) {
 };
 
 exports.setup = function(server) {
+  var week = (7 * 24 * 60 * 60 * 1000);
+
   server
     .use(connect.cookieParser())
-    .use(connect.session({ secret: "mouse dog" }));
+    .use(connect.session({
+      secret: "mouse dog",
+      cookie: {
+        path: '/wsapi',
+        httpOnly: true,
+        expires:  new Date(Date.now() + week),// a week XXX: think about session security, etc
+        maxAge: week
+      }
+    }));
 }

authority/static/dialog/main.js

@@ -271,6 +271,8 @@
         onerror
       );
 
+      // first we must see if we're authenticated
+
       $.ajax({
         url: '/wsapi/add_email?email=' + encodeURIComponent(email) + '&pubkey=' + encodeURIComponent(keypair.pub),
         success: function() {
@@ -280,7 +282,7 @@
         error: function() {
           runErrorDialog(
             "serverError",
-            "Error Creating Account!",
+            "Error Adding Address!",
             "There was a technical problem while trying to add this email to your account.  Yucky.",
             onsuccess, onerror);
         }
@@ -429,9 +431,6 @@
     $("#create_dialog").fadeIn(500);
   }
 
-  runCreateDialog();
-
-
   function errorOut(trans, code) {
     function getVerboseMessage(code) {
       var msgs = {