server/lib/oauth-model.ts

   1 import { OAuthClientInstance, UserInstance } from '../models'
   2 import { database as db } from '../initializers/database'
   3 import { logger } from '../helpers'
   4
   5 type TokenInfo = { accessToken: string, refreshToken: string, accessTokenExpiresAt: Date, refreshTokenExpiresAt: Date }
   6
   7 // ---------------------------------------------------------------------------
   8
   9 function getAccessToken (bearerToken: string) {
  10   logger.debug('Getting access token (bearerToken: ' + bearerToken + ').')
  11
  12   return db.OAuthToken.getByTokenAndPopulateUser(bearerToken)
  13 }
  14
  15 function getClient (clientId: string, clientSecret: string) {
  16   logger.debug('Getting Client (clientId: ' + clientId + ', clientSecret: ' + clientSecret + ').')
  17
  18   return db.OAuthClient.getByIdAndSecret(clientId, clientSecret)
  19 }
  20
  21 function getRefreshToken (refreshToken: string) {
  22   logger.debug('Getting RefreshToken (refreshToken: ' + refreshToken + ').')
  23
  24   return db.OAuthToken.getByRefreshTokenAndPopulateClient(refreshToken)
  25 }
  26
  27 async function getUser (username: string, password: string) {
  28   logger.debug('Getting User (username: ' + username + ', password: ******).')
  29
  30   const user = await db.User.getByUsername(username)
  31   if (!user) return null
  32
  33   const passwordMatch = await user.isPasswordMatch(password)
  34   if (passwordMatch === false) return null
  35
  36   return user
  37 }
  38
  39 async function revokeToken (tokenInfo: TokenInfo) {
  40   const token = await db.OAuthToken.getByRefreshTokenAndPopulateUser(tokenInfo.refreshToken)
  41   if (token) token.destroy()
  42
  43   /*
  44     * Thanks to https://github.com/manjeshpv/node-oauth2-server-implementation/blob/master/components/oauth/mongo-models.js
  45     * "As per the discussion we need set older date
  46     * revokeToken will expected return a boolean in future version
  47     * https://github.com/oauthjs/node-oauth2-server/pull/274
  48     * https://github.com/oauthjs/node-oauth2-server/issues/290"
  49   */
  50   const expiredToken = token
  51   expiredToken.refreshTokenExpiresAt = new Date('2015-05-28T06:59:53.000Z')
  52
  53   return expiredToken
  54 }
  55
  56 async function saveToken (token: TokenInfo, client: OAuthClientInstance, user: UserInstance) {
  57   logger.debug('Saving token ' + token.accessToken + ' for client ' + client.id + ' and user ' + user.id + '.')
  58
  59   const tokenToCreate = {
  60     accessToken: token.accessToken,
  61     accessTokenExpiresAt: token.accessTokenExpiresAt,
  62     refreshToken: token.refreshToken,
  63     refreshTokenExpiresAt: token.refreshTokenExpiresAt,
  64     oAuthClientId: client.id,
  65     userId: user.id
  66   }
  67
  68   const tokenCreated = await db.OAuthToken.create(tokenToCreate)
  69   const tokenToReturn = Object.assign(tokenCreated, { client, user })
  70
  71   return tokenToReturn
  72 }
  73
  74 // ---------------------------------------------------------------------------
  75
  76 // See https://github.com/oauthjs/node-oauth2-server/wiki/Model-specification for the model specifications
  77 export {
  78   getAccessToken,
  79   getClient,
  80   getRefreshToken,
  81   getUser,
  82   revokeToken,
  83   saveToken
  84 }