71 lines
1.6 KiB
JavaScript
71 lines
1.6 KiB
JavaScript
|
/* global WIKI */
|
||
|
|
||
|
const Model = require('objection').Model
|
||
|
const moment = require('moment')
|
||
|
const nanoid = require('nanoid')
|
||
|
|
||
|
/**
|
||
|
* Users model
|
||
|
*/
|
||
|
module.exports = class UserKey extends Model {
|
||
|
static get tableName() { return 'userKeys' }
|
||
|
|
||
|
static get jsonSchema () {
|
||
|
return {
|
||
|
type: 'object',
|
||
|
required: ['kind', 'token', 'validUntil'],
|
||
|
|
||
|
properties: {
|
||
|
id: {type: 'integer'},
|
||
|
kind: {type: 'string'},
|
||
|
token: {type: 'string'},
|
||
|
createdAt: {type: 'string'},
|
||
|
validUntil: {type: 'string'}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
static get relationMappings() {
|
||
|
return {
|
||
|
user: {
|
||
|
relation: Model.BelongsToOneRelation,
|
||
|
modelClass: require('./users'),
|
||
|
join: {
|
||
|
from: 'userKeys.userId',
|
||
|
to: 'users.id'
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
async $beforeInsert(context) {
|
||
|
await super.$beforeInsert(context)
|
||
|
|
||
|
this.createdAt = moment.utc().toISOString()
|
||
|
}
|
||
|
|
||
|
static async generateToken ({ userId, kind }, context) {
|
||
|
const token = await nanoid()
|
||
|
await WIKI.models.userKeys.query().insert({
|
||
|
kind,
|
||
|
token,
|
||
|
validUntil: moment.utc().add(1, 'days').toISOString(),
|
||
|
userId
|
||
|
})
|
||
|
return token
|
||
|
}
|
||
|
|
||
|
static async validateToken ({ kind, token }, context) {
|
||
|
const res = await WIKI.models.userKeys.query().findOne({ kind, token }).eager('user')
|
||
|
if (res) {
|
||
|
await WIKI.models.userKeys.query().deleteById(res.id)
|
||
|
if (moment.utc().isAfter(moment.utc(res.validUntil))) {
|
||
|
throw new WIKI.Error.AuthValidationTokenInvalid()
|
||
|
}
|
||
|
return res.user
|
||
|
} else {
|
||
|
throw new WIKI.Error.AuthValidationTokenInvalid()
|
||
|
}
|
||
|
}
|
||
|
}
|