126 lines
3.2 KiB
JavaScript
126 lines
3.2 KiB
JavaScript
'use strict';
|
|
|
|
const { Model } = require('@simpleworkjs/orm');
|
|
const crypto = require('crypto');
|
|
const UUID = () => crypto.randomUUID();
|
|
|
|
class Token extends Model {
|
|
static adapterName = 'redis';
|
|
static fields = {
|
|
token: { type: 'string', primaryKey: true, default: UUID, isPrivate: true, min: 36, max: 36 },
|
|
created_by: { isRequired: true, type: 'string', min: 3, max: 500 },
|
|
created_on: { type: 'integer', default: function(){return (new Date).getTime()} },
|
|
updated_on: { type: 'integer', default: function(){return (new Date).getTime()}, always: true },
|
|
is_valid: { default: true, type: 'boolean' }
|
|
}
|
|
|
|
async check(){
|
|
try{
|
|
return this.is_valid;
|
|
}catch(error){
|
|
return false
|
|
}
|
|
}
|
|
}
|
|
|
|
class AuthToken extends Token{
|
|
static fields = {
|
|
...Token.fields,
|
|
user: {model: 'User', type: 'hasOne', localKey: 'created_by'},
|
|
}
|
|
|
|
static async create(data){
|
|
data.created_by = data.username;
|
|
return super.create(data)
|
|
|
|
}
|
|
}
|
|
|
|
class InviteToken extends Token{
|
|
static fields = {
|
|
...Token.fields,
|
|
claimed_by: {default: '__NONE__', isRequired: false, type: 'string'},
|
|
mail: {default: '__NONE__', type: 'string'},
|
|
mail_token: {default: '__NONE__', type: 'string'},
|
|
groups: {default: '[]', type: 'string'},
|
|
}
|
|
|
|
async consume(data){
|
|
try{
|
|
if(this.is_valid){
|
|
data['is_valid'] = false;
|
|
|
|
await this.update(data);
|
|
return true;
|
|
}
|
|
return false;
|
|
|
|
}catch(error){
|
|
throw error;
|
|
}
|
|
}
|
|
}
|
|
|
|
class ImpersonationToken extends Token {
|
|
static fields = {
|
|
...Token.fields,
|
|
target_uid: {isRequired: true, type: 'string', min: 1, max: 200},
|
|
temp_hash: {isRequired: true, type: 'string', min: 1, max: 500},
|
|
expires_at: {default: function(){ return (new Date).getTime() + 7200000 }, type: 'integer'},
|
|
}
|
|
|
|
get isExpired() {
|
|
return (new Date).getTime() > this.expires_at;
|
|
}
|
|
|
|
static async add(data) {
|
|
data.created_by = data.admin_uid;
|
|
return this.create(data);
|
|
}
|
|
}
|
|
|
|
class PasswordResetToken extends Token {}
|
|
|
|
class OtpToken extends Token {
|
|
static fields = {
|
|
...Token.fields,
|
|
uid: {isRequired: true, type: 'string'},
|
|
code: {isRequired: true, type: 'string'},
|
|
method: {isRequired: true, type: 'string'},
|
|
expires_at: {default: function(){ return (new Date).getTime() + 600000 }, type: 'integer'},
|
|
};
|
|
|
|
get isExpired() {
|
|
return (new Date).getTime() > this.expires_at;
|
|
}
|
|
|
|
static async issue(uid, method) {
|
|
const existing = await this.find({uid});
|
|
for (const t of existing) {
|
|
if (t.is_valid) await t.update({is_valid: false});
|
|
}
|
|
const code = String(crypto.randomInt(100000, 1000000));
|
|
return this.create({uid, code, method, created_by: uid});
|
|
}
|
|
|
|
static async verify(uid, code) {
|
|
const tokens = await this.listDetail({uid});
|
|
const match = tokens.find(t => t.is_valid && !t.isExpired && t.code === code);
|
|
if (!match) return null;
|
|
await match.update({is_valid: false});
|
|
return match;
|
|
}
|
|
}
|
|
class ServiceToken extends Token {
|
|
static fields = {
|
|
...Token.fields,
|
|
resource_id: {isRequired: true, type: 'string'}
|
|
}
|
|
|
|
static async issue(resource_id, created_by) {
|
|
return this.create({resource_id, created_by});
|
|
}
|
|
}
|
|
|
|
module.exports = {Token, InviteToken, AuthToken, ImpersonationToken, PasswordResetToken, OtpToken, ServiceToken};
|