Half-fix of #96

[qwazix]

This solves the error 500 on the /api/me endpoint but the issue is
not completely solved as this now throws a 401, similar to the other
endpoints, due to SQLite returning an empty result set when queried
with byte array. See the issue discussion for more info.

---

• I have signed the CLA

[thebaer]

Thanks for taking a stab at this. Based on this Stack Overflow answer, I guess LIKE compares character by character, where = does not, so that's why this works. Great catch.

As for the db.now() fixes, does this still work on MySQL? I haven't tested yet, but I believe that having the db.now() call as a parameter instead of inline the in query string will mean that it gets converted to text and escaped. E.g. it becomes expires > "NOW()" instead of expires > NOW()

[leo60228]

I'm using the latest commit in this PR and I can login, but all authenticated endpoints fail.

[qwazix]

There were a few more places where I should replace = with LIKE. I still need to check if MySQL expires tokens correctly.

[qwazix]

As for the db.now() fixes, does this still work on MySQL? I haven't tested yet, but I believe that having the db.now() call as a parameter instead of inline the in query string will mean that it gets converted to text and escaped. E.g. it becomes expires > "NOW()" instead of expires > NOW()

You were right. I replaced the ? substitution with string concatenation and tested both MySQL and SQLite with expired tokens and both work as expected.

Pls review.

(Btw I squashed all the commits because I had made a mess of them so you'll have to fetch again, sorry :-/ )

[thebaer]

Tested and verified this works. Thanks!