Sharkey/src/api/endpoints/auth/session/generate.ts

77 lines
1.6 KiB
TypeScript
Raw Normal View History

2016-12-29 00:49:51 +02:00
/**
* Module dependencies
*/
import * as uuid from 'uuid';
2017-03-03 12:39:41 +02:00
import it from '../../../it';
2016-12-29 00:49:51 +02:00
import App from '../../../models/app';
import AuthSess from '../../../models/auth-session';
2017-01-26 16:25:12 +02:00
import config from '../../../../conf';
2016-12-29 00:49:51 +02:00
2017-01-04 05:59:20 +02:00
/**
* @swagger
* /auth/session/generate:
* post:
* summary: Generate a session
* parameters:
* -
* name: app_secret
* description: App Secret
2017-01-04 05:59:20 +02:00
* in: formData
* required: true
* type: string
2017-03-01 10:37:01 +02:00
*
2017-01-04 05:59:20 +02:00
* responses:
* 200:
* description: OK
* schema:
* type: object
* properties:
* token:
* type: string
2017-01-05 16:42:27 +02:00
* description: Session Token
2017-01-04 05:59:20 +02:00
* url:
* type: string
2017-01-05 16:42:27 +02:00
* description: Authentication form's URL
2017-01-05 17:39:56 +02:00
* default:
2017-01-04 05:59:20 +02:00
* description: Failed
* schema:
* $ref: "#/definitions/Error"
*/
2016-12-29 00:49:51 +02:00
/**
* Generate a session
*
2017-03-01 10:37:01 +02:00
* @param {any} params
* @return {Promise<any>}
2016-12-29 00:49:51 +02:00
*/
2017-03-03 21:28:38 +02:00
module.exports = (params) => new Promise(async (res, rej) => {
2016-12-29 00:49:51 +02:00
// Get 'app_secret' parameter
2017-03-03 12:39:41 +02:00
const [appSecret, appSecretErr] = it(params.app_secret).expect.string().required().qed();
if (appSecretErr) return rej('invalid app_secret param');
2016-12-29 00:49:51 +02:00
// Lookup app
const app = await App.findOne({
secret: appSecret
});
if (app == null) {
return rej('app not found');
}
// Generate token
const token = uuid.v4();
// Create session token document
2017-01-20 10:38:05 +02:00
const doc = await AuthSess.insert({
2016-12-29 00:49:51 +02:00
created_at: new Date(),
app_id: app._id,
token: token
});
// Response
res({
token: doc.token,
url: `${config.auth_url}/${doc.token}`
});
});