server/lib/oauth-model.js

   1 const mongoose = require('mongoose')
   2
   3 const logger = require('../helpers/logger')
   4
   5 const OAuthClient = mongoose.model('OAuthClient')
   6 const OAuthToken = mongoose.model('OAuthToken')
   7 const User = mongoose.model('User')
   8
   9 // See https://github.com/oauthjs/node-oauth2-server/wiki/Model-specification for the model specifications
  10 const OAuthModel = {
  11   getAccessToken,
  12   getClient,
  13   getRefreshToken,
  14   getUser,
  15   revokeToken,
  16   saveToken
  17 }
  18
  19 // ---------------------------------------------------------------------------
  20
  21 function getAccessToken (bearerToken) {
  22   logger.debug('Getting access token (bearerToken: ' + bearerToken + ').')
  23
  24   return OAuthToken.getByTokenAndPopulateUser(bearerToken)
  25 }
  26
  27 function getClient (clientId, clientSecret) {
  28   logger.debug('Getting Client (clientId: ' + clientId + ', clientSecret: ' + clientSecret + ').')
  29
  30   // TODO req validator
  31   const mongoId = new mongoose.mongo.ObjectID(clientId)
  32   return OAuthClient.getByIdAndSecret(mongoId, clientSecret)
  33 }
  34
  35 function getRefreshToken (refreshToken) {
  36   logger.debug('Getting RefreshToken (refreshToken: ' + refreshToken + ').')
  37
  38   return OAuthToken.getByRefreshTokenAndPopulateClient(refreshToken)
  39 }
  40
  41 function getUser (username, password) {
  42   logger.debug('Getting User (username: ' + username + ', password: ' + password + ').')
  43
  44   return User.getByUsername(username).then(function (user) {
  45     if (!user) return null
  46
  47     // We need to return a promise
  48     return new Promise(function (resolve, reject) {
  49       return user.isPasswordMatch(password, function (err, isPasswordMatch) {
  50         if (err) return reject(err)
  51
  52         if (isPasswordMatch === true) {
  53           return resolve(user)
  54         }
  55
  56         return resolve(null)
  57       })
  58     })
  59   })
  60 }
  61
  62 function revokeToken (token) {
  63   return OAuthToken.getByRefreshTokenAndPopulateUser(token.refreshToken).then(function (tokenDB) {
  64     if (tokenDB) tokenDB.remove()
  65
  66     /*
  67       * Thanks to https://github.com/manjeshpv/node-oauth2-server-implementation/blob/master/components/oauth/mongo-models.js
  68       * "As per the discussion we need set older date
  69       * revokeToken will expected return a boolean in future version
  70       * https://github.com/oauthjs/node-oauth2-server/pull/274
  71       * https://github.com/oauthjs/node-oauth2-server/issues/290"
  72     */
  73     const expiredToken = tokenDB
  74     expiredToken.refreshTokenExpiresAt = new Date('2015-05-28T06:59:53.000Z')
  75
  76     return expiredToken
  77   })
  78 }
  79
  80 function saveToken (token, client, user) {
  81   logger.debug('Saving token ' + token.accessToken + ' for client ' + client.id + ' and user ' + user.id + '.')
  82
  83   const tokenObj = new OAuthToken({
  84     accessToken: token.accessToken,
  85     accessTokenExpiresAt: token.accessTokenExpiresAt,
  86     client: client.id,
  87     refreshToken: token.refreshToken,
  88     refreshTokenExpiresAt: token.refreshTokenExpiresAt,
  89     user: user.id
  90   })
  91
  92   return tokenObj.save().then(function (tokenCreated) {
  93     tokenCreated.client = client
  94     tokenCreated.user = user
  95     return tokenCreated
  96   }).catch(function (err) {
  97     throw err
  98   })
  99 }
 100
 101 // ---------------------------------------------------------------------------
 102
 103 module.exports = OAuthModel