Was detained and strip searched at the US/Canada border for 1mg THC gummies

Location: New York

Was coming back into the states from Canada and forgot that I had some 1mg THC gummies in my bag. Customs & Border Patrol found them, detained me, made me strip naked, handcuffed me and searched my body. They also told me legally I had to give them my phone and the passcode for it.

The whole experience sucked, obviously, but I'm just wondering if any of this was legal on their end? Especially the phone and passcode, did I actually have to give that to them by law?