54 lines
2.2 KiB
JavaScript
54 lines
2.2 KiB
JavaScript
import { globalConfig, db } from "../index.js"
|
|
|
|
/**
|
|
* (DEPRECATED) Checks if a token exists in the sessions file (authentication) and if it has the correct permissions (authorization)
|
|
* @param {string} token Token as received by client
|
|
* @param {string} scope Scope the token will need to have in order to succeed
|
|
* @returns {boolean} True for successful authentication and authorization, false if either fail
|
|
*/
|
|
async function checkToken(token,scope) {
|
|
return await db`select s.token, s.scopes, s.expires, u.username from sessions s join users u on s.owner = u.id where s.token = ${token}`.then(response => {
|
|
if (response.length === 0) {
|
|
return false
|
|
} else if (response[0]?.scopes.split(",").includes(scope)) {
|
|
return true
|
|
} else {
|
|
return false
|
|
}
|
|
})
|
|
}
|
|
|
|
/**
|
|
* Checks for tokens provided in request and validates them against the sessions table including the desired scope
|
|
* @param {object} request Express request object
|
|
* @param {string} scope Desired scope for action
|
|
* @typedef {object} Object containing the result and the username of the token owner
|
|
* @property {boolean} result Boolean result of if the check passed
|
|
* @property {string} owner Username of the token owner
|
|
* @property {number} ownerId Database ID of the token owner
|
|
*/
|
|
|
|
async function checkTokenNew(request, scope) {
|
|
|
|
if (!request.cookies["APIToken"] && !request.get("Authorization")) {
|
|
return { result: false, owner: "", ownerId: "" }
|
|
} else {
|
|
return await db`select * from sessions where token = ${request.get("Authorization") ?? request.cookies["APIToken"]}`.then(response => {
|
|
if (response.length === 0) {
|
|
return { result: false, owner: response[0]?.username, ownerId: response[0]?.owner }
|
|
} else if (response[0]?.scopes.split(",").includes(scope)) {
|
|
return { result: true, owner: response[0]?.username, ownerId: response[0]?.owner }
|
|
} else {
|
|
return { result: false, owner: response[0]?.username, ownerId: response[0]?.owner }
|
|
}
|
|
}).catch(dbErr => {
|
|
return { result: false, owner: "", ownerId: "" }
|
|
})
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
export {checkToken, checkTokenNew} |