aboutsummaryrefslogtreecommitdiffhomepage
path: root/server
diff options
context:
space:
mode:
Diffstat (limited to 'server')
-rw-r--r--server/controllers/api/v1/index.js2
-rw-r--r--server/controllers/api/v1/users.js22
-rw-r--r--server/middlewares/oauth2.js11
-rw-r--r--server/models/users.js108
4 files changed, 143 insertions, 0 deletions
diff --git a/server/controllers/api/v1/index.js b/server/controllers/api/v1/index.js
index 45f07ae1f..7b3ec32c0 100644
--- a/server/controllers/api/v1/index.js
+++ b/server/controllers/api/v1/index.js
@@ -6,10 +6,12 @@ const router = express.Router()
6 6
7const podsController = require('./pods') 7const podsController = require('./pods')
8const remoteVideosController = require('./remoteVideos') 8const remoteVideosController = require('./remoteVideos')
9const usersController = require('./users')
9const videosController = require('./videos') 10const videosController = require('./videos')
10 11
11router.use('/pods', podsController) 12router.use('/pods', podsController)
12router.use('/remotevideos', remoteVideosController) 13router.use('/remotevideos', remoteVideosController)
14router.use('/users', usersController)
13router.use('/videos', videosController) 15router.use('/videos', videosController)
14router.use('/*', badRequest) 16router.use('/*', badRequest)
15 17
diff --git a/server/controllers/api/v1/users.js b/server/controllers/api/v1/users.js
new file mode 100644
index 000000000..acb860c66
--- /dev/null
+++ b/server/controllers/api/v1/users.js
@@ -0,0 +1,22 @@
1'use strict'
2
3var express = require('express')
4var oAuth2 = require('../../../middlewares/oauth2')
5
6const middleware = require('../../../middlewares')
7const cacheMiddleware = middleware.cache
8
9const router = express.Router()
10
11router.post('/token', cacheMiddleware.cache(false), oAuth2.token(), success)
12router.get('/authenticate', cacheMiddleware.cache(false), oAuth2.authenticate(), success)
13
14// ---------------------------------------------------------------------------
15
16module.exports = router
17
18// ---------------------------------------------------------------------------
19
20function success (req, res, next) {
21 res.end()
22}
diff --git a/server/middlewares/oauth2.js b/server/middlewares/oauth2.js
new file mode 100644
index 000000000..a1fa61fbb
--- /dev/null
+++ b/server/middlewares/oauth2.js
@@ -0,0 +1,11 @@
1'use strict'
2
3const OAuthServer = require('express-oauth-server')
4
5const oAuth2 = new OAuthServer({
6 model: require('../models/users')
7})
8
9// ---------------------------------------------------------------------------
10
11module.exports = oAuth2
diff --git a/server/models/users.js b/server/models/users.js
new file mode 100644
index 000000000..355d991bd
--- /dev/null
+++ b/server/models/users.js
@@ -0,0 +1,108 @@
1const mongoose = require('mongoose')
2
3const logger = require('../helpers/logger')
4
5// ---------------------------------------------------------------------------
6
7const oAuthTokensSchema = mongoose.Schema({
8 accessToken: String,
9 accessTokenExpiresOn: Date,
10 client: { type: mongoose.Schema.Types.ObjectId, ref: 'oAuthClients' },
11 refreshToken: String,
12 refreshTokenExpiresOn: Date,
13 user: { type: mongoose.Schema.Types.ObjectId, ref: 'users' }
14})
15const OAuthTokensDB = mongoose.model('oAuthTokens', oAuthTokensSchema)
16
17const oAuthClientsSchema = mongoose.Schema({
18 clientSecret: String,
19 grants: Array,
20 redirectUris: Array
21})
22const OAuthClientsDB = mongoose.model('oAuthClients', oAuthClientsSchema)
23
24const usersSchema = mongoose.Schema({
25 password: String,
26 username: String
27})
28const UsersDB = mongoose.model('users', usersSchema)
29
30// ---------------------------------------------------------------------------
31
32const Users = {
33 createClient: createClient,
34 createUser: createUser,
35 getAccessToken: getAccessToken,
36 getClient: getClient,
37 getRefreshToken: getRefreshToken,
38 getUser: getUser,
39 saveToken: saveToken
40}
41
42function createClient (secret, grants, callback) {
43 logger.debug('Creating client.')
44
45 const mongo_id = new mongoose.mongo.ObjectID()
46 return OAuthClientsDB.create({ _id: mongo_id, clientSecret: secret, grants: grants }, function (err) {
47 if (err) return callback(err)
48
49 return callback(null, mongo_id)
50 })
51}
52
53function createUser (username, password, callback) {
54 logger.debug('Creating user.')
55
56 return UsersDB.create({ username: username, password: password }, callback)
57}
58
59function getAccessToken (bearerToken, callback) {
60 logger.debug('Getting access token (bearerToken: ' + bearerToken + ').')
61
62 return OAuthTokensDB.findOne({ accessToken: bearerToken }).populate('user')
63}
64
65function getClient (clientId, clientSecret) {
66 logger.debug('Getting Client (clientId: ' + clientId + ', clientSecret: ' + clientSecret + ').')
67
68 // TODO req validator
69 const mongo_id = new mongoose.mongo.ObjectID(clientId)
70 return OAuthClientsDB.findOne({ _id: mongo_id, clientSecret: clientSecret })
71}
72
73function getRefreshToken (refreshToken) {
74 logger.debug('Getting RefreshToken (refreshToken: ' + refreshToken + ').')
75
76 return OAuthTokensDB.findOne({ refreshToken: refreshToken })
77}
78
79function getUser (username, password) {
80 logger.debug('Getting User (username: ' + username + ', password: ' + password + ').')
81 return UsersDB.findOne({ username: username, password: password })
82}
83
84function saveToken (token, client, user) {
85 logger.debug('Saving token for client ' + client.id + ' and user ' + user.id + '.')
86
87 const token_to_create = {
88 accessToken: token.accessToken,
89 accessTokenExpiresOn: token.accessTokenExpiresOn,
90 client: client.id,
91 refreshToken: token.refreshToken,
92 refreshTokenExpiresOn: token.refreshTokenExpiresOn,
93 user: user.id
94 }
95
96 return OAuthTokensDB.create(token_to_create, function (err, token_created) {
97 if (err) throw err // node-oauth2-server library use Promise.try
98
99 token_created.client = client
100 token_created.user = user
101
102 return token_created
103 })
104}
105
106// ---------------------------------------------------------------------------
107
108module.exports = Users