mirror of https://github.com/Chocobozzz/PeerTube
104 lines
3.1 KiB
JavaScript
104 lines
3.1 KiB
JavaScript
const mongoose = require('mongoose')
|
|
|
|
const logger = require('../helpers/logger')
|
|
|
|
const OAuthClient = mongoose.model('OAuthClient')
|
|
const OAuthToken = mongoose.model('OAuthToken')
|
|
const User = mongoose.model('User')
|
|
|
|
// See https://github.com/oauthjs/node-oauth2-server/wiki/Model-specification for the model specifications
|
|
const OAuthModel = {
|
|
getAccessToken,
|
|
getClient,
|
|
getRefreshToken,
|
|
getUser,
|
|
revokeToken,
|
|
saveToken
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
function getAccessToken (bearerToken) {
|
|
logger.debug('Getting access token (bearerToken: ' + bearerToken + ').')
|
|
|
|
return OAuthToken.getByTokenAndPopulateUser(bearerToken)
|
|
}
|
|
|
|
function getClient (clientId, clientSecret) {
|
|
logger.debug('Getting Client (clientId: ' + clientId + ', clientSecret: ' + clientSecret + ').')
|
|
|
|
// TODO req validator
|
|
const mongoId = new mongoose.mongo.ObjectID(clientId)
|
|
return OAuthClient.getByIdAndSecret(mongoId, clientSecret)
|
|
}
|
|
|
|
function getRefreshToken (refreshToken) {
|
|
logger.debug('Getting RefreshToken (refreshToken: ' + refreshToken + ').')
|
|
|
|
return OAuthToken.getByRefreshTokenAndPopulateClient(refreshToken)
|
|
}
|
|
|
|
function getUser (username, password) {
|
|
logger.debug('Getting User (username: ' + username + ', password: ' + password + ').')
|
|
|
|
return User.getByUsername(username).then(function (user) {
|
|
if (!user) return null
|
|
|
|
// We need to return a promise
|
|
return new Promise(function (resolve, reject) {
|
|
return user.isPasswordMatch(password, function (err, isPasswordMatch) {
|
|
if (err) return reject(err)
|
|
|
|
if (isPasswordMatch === true) {
|
|
return resolve(user)
|
|
}
|
|
|
|
return resolve(null)
|
|
})
|
|
})
|
|
})
|
|
}
|
|
|
|
function revokeToken (token) {
|
|
return OAuthToken.getByRefreshTokenAndPopulateUser(token.refreshToken).then(function (tokenDB) {
|
|
if (tokenDB) tokenDB.remove()
|
|
|
|
/*
|
|
* Thanks to https://github.com/manjeshpv/node-oauth2-server-implementation/blob/master/components/oauth/mongo-models.js
|
|
* "As per the discussion we need set older date
|
|
* revokeToken will expected return a boolean in future version
|
|
* https://github.com/oauthjs/node-oauth2-server/pull/274
|
|
* https://github.com/oauthjs/node-oauth2-server/issues/290"
|
|
*/
|
|
const expiredToken = tokenDB
|
|
expiredToken.refreshTokenExpiresAt = new Date('2015-05-28T06:59:53.000Z')
|
|
|
|
return expiredToken
|
|
})
|
|
}
|
|
|
|
function saveToken (token, client, user) {
|
|
logger.debug('Saving token ' + token.accessToken + ' for client ' + client.id + ' and user ' + user.id + '.')
|
|
|
|
const tokenObj = new OAuthToken({
|
|
accessToken: token.accessToken,
|
|
accessTokenExpiresAt: token.accessTokenExpiresAt,
|
|
client: client.id,
|
|
refreshToken: token.refreshToken,
|
|
refreshTokenExpiresAt: token.refreshTokenExpiresAt,
|
|
user: user.id
|
|
})
|
|
|
|
return tokenObj.save().then(function (tokenCreated) {
|
|
tokenCreated.client = client
|
|
tokenCreated.user = user
|
|
return tokenCreated
|
|
}).catch(function (err) {
|
|
throw err
|
|
})
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
module.exports = OAuthModel
|