Sharkey/src/server/api/endpoints/auth/accept.ts

74 lines
1.5 KiB
TypeScript
Raw Normal View History

2016-12-29 00:49:51 +02:00
import rndstr from 'rndstr';
2017-01-06 04:50:46 +02:00
const crypto = require('crypto');
2017-03-08 20:50:09 +02:00
import $ from 'cafy';
2018-03-29 14:32:18 +03:00
import App from '../../../../models/app';
import AuthSess from '../../../../models/auth-session';
import AccessToken from '../../../../models/access-token';
2018-06-18 03:54:53 +03:00
import { ILocalUser } from '../../../../models/user';
2018-11-02 05:49:08 +02:00
import getParams from '../../get-params';
2016-12-29 00:49:51 +02:00
2018-07-16 22:36:44 +03:00
export const meta = {
requireCredential: true,
2018-11-02 05:49:08 +02:00
secure: true,
params: {
token: {
validator: $.str
}
}
2018-07-16 22:36:44 +03:00
};
2018-07-05 20:58:29 +03:00
export default (params: any, user: ILocalUser) => new Promise(async (res, rej) => {
2018-11-02 05:49:08 +02:00
const [ps, psErr] = getParams(meta, params);
if (psErr) return rej(psErr);
2016-12-29 00:49:51 +02:00
// Fetch token
const session = await AuthSess
2018-11-02 05:49:08 +02:00
.findOne({ token: ps.token });
2016-12-29 00:49:51 +02:00
if (session === null) {
return rej('session not found');
}
// Generate access token
2017-03-03 12:39:41 +02:00
const accessToken = rndstr('a-zA-Z0-9', 32);
2016-12-29 00:49:51 +02:00
// Fetch exist access token
const exist = await AccessToken.findOne({
2018-03-29 08:48:47 +03:00
appId: session.appId,
userId: user._id,
2016-12-29 00:49:51 +02:00
});
if (exist === null) {
2017-01-06 04:50:46 +02:00
// Lookup app
const app = await App.findOne({
2018-03-29 08:48:47 +03:00
_id: session.appId
2017-01-06 04:50:46 +02:00
});
// Generate Hash
2017-02-08 15:43:46 +02:00
const sha256 = crypto.createHash('sha256');
2017-03-03 12:39:41 +02:00
sha256.update(accessToken + app.secret);
2017-02-08 15:43:46 +02:00
const hash = sha256.digest('hex');
2017-01-06 04:50:46 +02:00
// Insert access token doc
await AccessToken.insert({
2018-03-29 08:48:47 +03:00
createdAt: new Date(),
appId: session.appId,
userId: user._id,
2017-03-03 12:39:41 +02:00
token: accessToken,
2017-01-06 04:50:46 +02:00
hash: hash
2016-12-29 00:49:51 +02:00
});
}
// Update session
2017-01-17 04:11:22 +02:00
await AuthSess.update(session._id, {
2017-02-08 18:34:22 +02:00
$set: {
2018-03-29 08:48:47 +03:00
userId: user._id
2017-02-08 18:34:22 +02:00
}
2016-12-29 00:49:51 +02:00
});
// Response
res();
});