1 import express from 'express'
2 import { Socket } from 'socket.io'
3 import { getAccessToken } from '@server/lib/auth/oauth-model'
4 import { RunnerModel } from '@server/models/runner/runner'
5 import { HttpStatusCode } from '../../shared/models/http/http-error-codes'
6 import { logger } from '../helpers/logger'
7 import { handleOAuthAuthenticate } from '../lib/auth/oauth'
9 function authenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
10 handleOAuthAuthenticate(req, res)
11 .then((token: any) => {
12 res.locals.oauth = { token }
13 res.locals.authenticated = true
18 logger.info('Cannot authenticate.', { err })
22 message: 'Token is invalid',
28 function authenticateSocket (socket: Socket, next: (err?: any) => void) {
29 const accessToken = socket.handshake.query['accessToken']
31 logger.debug('Checking access token in runner.')
33 if (!accessToken) return next(new Error('No access token provided'))
34 if (typeof accessToken !== 'string') return next(new Error('Access token is invalid'))
36 getAccessToken(accessToken)
38 const now = new Date()
40 if (!tokenDB || tokenDB.accessTokenExpiresAt < now || tokenDB.refreshTokenExpiresAt < now) {
41 return next(new Error('Invalid access token.'))
44 socket.handshake.auth.user = tokenDB.User
48 .catch(err => logger.error('Cannot get access token.', { err }))
51 function authenticatePromise (req: express.Request, res: express.Response) {
52 return new Promise<void>(resolve => {
53 // Already authenticated? (or tried to)
54 if (res.locals.oauth?.token.User) return resolve()
56 if (res.locals.authenticated === false) {
58 status: HttpStatusCode.UNAUTHORIZED_401,
59 message: 'Not authenticated'
63 authenticate(req, res, () => resolve())
67 function optionalAuthenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
68 if (req.header('authorization')) return authenticate(req, res, next)
70 res.locals.authenticated = false
75 // ---------------------------------------------------------------------------
77 function authenticateRunnerSocket (socket: Socket, next: (err?: any) => void) {
78 const runnerToken = socket.handshake.auth['runnerToken']
80 logger.debug('Checking runner token in socket.')
82 if (!runnerToken) return next(new Error('No runner token provided'))
83 if (typeof runnerToken !== 'string') return next(new Error('Runner token is invalid'))
85 RunnerModel.loadByToken(runnerToken)
87 if (!runner) return next(new Error('Invalid runner token.'))
89 socket.handshake.auth.runner = runner
93 .catch(err => logger.error('Cannot get runner token.', { err }))
96 // ---------------------------------------------------------------------------
102 optionalAuthenticate,
103 authenticateRunnerSocket