98 lines
1.9 KiB
TypeScript
98 lines
1.9 KiB
TypeScript
'use strict';
|
|
|
|
/**
|
|
* Module dependencies
|
|
*/
|
|
import rndstr from 'rndstr';
|
|
const crypto = require('crypto');
|
|
import it from '../../it';
|
|
import App from '../../models/app';
|
|
import AuthSess from '../../models/auth-session';
|
|
import AccessToken from '../../models/access-token';
|
|
|
|
/**
|
|
* @swagger
|
|
* /auth/accept:
|
|
* post:
|
|
* summary: Accept a session
|
|
* parameters:
|
|
* - $ref: "#/parameters/NativeToken"
|
|
* -
|
|
* name: token
|
|
* description: Session Token
|
|
* in: formData
|
|
* required: true
|
|
* type: string
|
|
* responses:
|
|
* 204:
|
|
* description: OK
|
|
*
|
|
* default:
|
|
* description: Failed
|
|
* schema:
|
|
* $ref: "#/definitions/Error"
|
|
*/
|
|
|
|
/**
|
|
* Accept
|
|
*
|
|
* @param {any} params
|
|
* @param {any} user
|
|
* @return {Promise<any>}
|
|
*/
|
|
module.exports = (params, user) =>
|
|
new Promise(async (res, rej) =>
|
|
{
|
|
// Get 'token' parameter
|
|
const [token, tokenErr] = it(params.token).expect.string().required().qed();
|
|
if (tokenErr) return rej('invalid token param');
|
|
|
|
// Fetch token
|
|
const session = await AuthSess
|
|
.findOne({ token: token });
|
|
|
|
if (session === null) {
|
|
return rej('session not found');
|
|
}
|
|
|
|
// Generate access token
|
|
const accessToken = rndstr('a-zA-Z0-9', 32);
|
|
|
|
// Fetch exist access token
|
|
const exist = await AccessToken.findOne({
|
|
app_id: session.app_id,
|
|
user_id: user._id,
|
|
});
|
|
|
|
if (exist === null) {
|
|
// Lookup app
|
|
const app = await App.findOne({
|
|
_id: session.app_id
|
|
});
|
|
|
|
// Generate Hash
|
|
const sha256 = crypto.createHash('sha256');
|
|
sha256.update(accessToken + app.secret);
|
|
const hash = sha256.digest('hex');
|
|
|
|
// Insert access token doc
|
|
await AccessToken.insert({
|
|
created_at: new Date(),
|
|
app_id: session.app_id,
|
|
user_id: user._id,
|
|
token: accessToken,
|
|
hash: hash
|
|
});
|
|
}
|
|
|
|
// Update session
|
|
await AuthSess.update(session._id, {
|
|
$set: {
|
|
user_id: user._id
|
|
}
|
|
});
|
|
|
|
// Response
|
|
res();
|
|
});
|