server/lib/oauth-model.ts

   1 import { OAuthClientInstance, UserInstance } from '../models'
   2 import { database as db } from '../initializers/database'
   3 import { logger } from '../helpers'
   4
   5 type TokenInfo = { accessToken: string, refreshToken: string, accessTokenExpiresAt: Date, refreshTokenExpiresAt: Date }
   6
   7 // ---------------------------------------------------------------------------
   8
   9 function getAccessToken (bearerToken: string) {
  10   logger.debug('Getting access token (bearerToken: ' + bearerToken + ').')
  11
  12   return db.OAuthToken.getByTokenAndPopulateUser(bearerToken)
  13 }
  14
  15 function getClient (clientId: string, clientSecret: string) {
  16   logger.debug('Getting Client (clientId: ' + clientId + ', clientSecret: ' + clientSecret + ').')
  17
  18   return db.OAuthClient.getByIdAndSecret(clientId, clientSecret)
  19 }
  20
  21 function getRefreshToken (refreshToken: string) {
  22   logger.debug('Getting RefreshToken (refreshToken: ' + refreshToken + ').')
  23
  24   return db.OAuthToken.getByRefreshTokenAndPopulateClient(refreshToken)
  25 }
  26
  27 function getUser (username: string, password: string) {
  28   logger.debug('Getting User (username: ' + username + ', password: ' + password + ').')
  29
  30   return db.User.getByUsername(username).then(function (user) {
  31     if (!user) return null
  32
  33     // We need to return a promise
  34     return new Promise(function (resolve, reject) {
  35       return user.isPasswordMatch(password, function (err, isPasswordMatch) {
  36         if (err) return reject(err)
  37
  38         if (isPasswordMatch === true) {
  39           return resolve(user)
  40         }
  41
  42         return resolve(null)
  43       })
  44     })
  45   })
  46 }
  47
  48 function revokeToken (token: TokenInfo) {
  49   return db.OAuthToken.getByRefreshTokenAndPopulateUser(token.refreshToken).then(function (tokenDB) {
  50     if (tokenDB) tokenDB.destroy()
  51
  52     /*
  53       * Thanks to https://github.com/manjeshpv/node-oauth2-server-implementation/blob/master/components/oauth/mongo-models.js
  54       * "As per the discussion we need set older date
  55       * revokeToken will expected return a boolean in future version
  56       * https://github.com/oauthjs/node-oauth2-server/pull/274
  57       * https://github.com/oauthjs/node-oauth2-server/issues/290"
  58     */
  59     const expiredToken = tokenDB
  60     expiredToken.refreshTokenExpiresAt = new Date('2015-05-28T06:59:53.000Z')
  61
  62     return expiredToken
  63   })
  64 }
  65
  66 function saveToken (token: TokenInfo, client: OAuthClientInstance, user: UserInstance) {
  67   logger.debug('Saving token ' + token.accessToken + ' for client ' + client.id + ' and user ' + user.id + '.')
  68
  69   const tokenToCreate = {
  70     accessToken: token.accessToken,
  71     accessTokenExpiresAt: token.accessTokenExpiresAt,
  72     refreshToken: token.refreshToken,
  73     refreshTokenExpiresAt: token.refreshTokenExpiresAt,
  74     oAuthClientId: client.id,
  75     userId: user.id
  76   }
  77
  78   return db.OAuthToken.create(tokenToCreate).then(function (tokenCreated: any) {
  79     tokenCreated.client = client
  80     tokenCreated.user = user
  81
  82     return tokenCreated
  83   }).catch(function (err) {
  84     throw err
  85   })
  86 }
  87
  88 // ---------------------------------------------------------------------------
  89
  90 // See https://github.com/oauthjs/node-oauth2-server/wiki/Model-specification for the model specifications
  91 export {
  92   getAccessToken,
  93   getClient,
  94   getRefreshToken,
  95   getUser,
  96   revokeToken,
  97   saveToken
  98 }