0ct0pu5/runtipi
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: check user's existence on token refresh

Browse source
This commit is contained in:
Nicolas Meienberger 2023-05-02 19:22:57 +02:00 • committed by Nicolas Meienberger
parent 5d185ba365
commit 50ff40fbaf
2 changed files with 10 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/server/routers/auth/auth.router.ts
View file

@ -9,7 +9,7 @@ export const authRouter = router({
login: publicProcedure.input(z.object({ username: z.string(), password: z.string() })).mutation(async ({ input }) => AuthService.login({ ...input })),
logout: protectedProcedure.mutation(async ({ ctx }) => AuthServiceClass.logout(ctx.session.id)),
register: publicProcedure.input(z.object({ username: z.string(), password: z.string() })).mutation(async ({ input }) => AuthService.register({ ...input })),
refreshToken: protectedProcedure.mutation(async ({ ctx }) => AuthServiceClass.refreshToken(ctx.session.id)),
refreshToken: protectedProcedure.mutation(async ({ ctx }) => AuthService.refreshToken(ctx.session.id)),
me: publicProcedure.query(async ({ ctx }) => AuthService.me(ctx.session?.userId)),
isConfigured: publicProcedure.query(async () => AuthService.isConfigured()),
// Password

10
src/server/services/auth/auth.service.ts
View file

@ -282,12 +282,20 @@ export class AuthServiceClass {
* @param {string} [session] - The current session token
* @returns {Promise<{token: string} | null>} - An object containing the new session token, or null if the session is invalid
*/
public static refreshToken = async (session?: string): Promise<TokenResponse | null> => {
public refreshToken = async (session?: string): Promise<TokenResponse | null> => {
if (!session) return null;
const userId = await TipiCache.get(session);
if (!userId) return null;
const user = await this.queries.getUserById(Number(userId));
if (!user) {
await TipiCache.delByValue(userId.toString(), 'auth');
return null;
}
// Expire token in 6 seconds
await TipiCache.set(session, userId, 6);