76 lines
1.8 KiB
TypeScript
76 lines
1.8 KiB
TypeScript
import isNativeToken from './common/is-native-token';
|
|
import { User } from '../../models/entities/user';
|
|
import { Users, AccessTokens, Apps } from '../../models';
|
|
import { AccessToken } from '../../models/entities/access-token';
|
|
import { Cache } from '@/misc/cache';
|
|
|
|
// TODO: TypeORMのカスタムキャッシュプロバイダを使っても良いかも
|
|
// ref. https://github.com/typeorm/typeorm/blob/master/docs/caching.md
|
|
const cache = new Cache<User>(1000 * 60 * 60);
|
|
|
|
export class AuthenticationError extends Error {
|
|
constructor(message: string) {
|
|
super(message);
|
|
this.name = 'AuthenticationError';
|
|
}
|
|
}
|
|
|
|
export default async (token: string): Promise<[User | null | undefined, App | null | undefined]> => {
|
|
if (token == null) {
|
|
return [null, null];
|
|
}
|
|
|
|
if (isNativeToken(token)) {
|
|
const cached = cache.get(token);
|
|
if (cached) {
|
|
return [cached, null];
|
|
}
|
|
|
|
// Fetch user
|
|
const user = await Users
|
|
.findOne({ token });
|
|
|
|
if (user == null) {
|
|
throw new AuthenticationError('user not found');
|
|
}
|
|
|
|
cache.set(token, user);
|
|
|
|
return [user, null];
|
|
} else {
|
|
// TODO: cache
|
|
const accessToken = await AccessTokens.findOne({
|
|
where: [{
|
|
hash: token.toLowerCase() // app
|
|
}, {
|
|
token: token // miauth
|
|
}],
|
|
});
|
|
|
|
if (accessToken == null) {
|
|
throw new AuthenticationError('invalid signature');
|
|
}
|
|
|
|
AccessTokens.update(accessToken.id, {
|
|
lastUsedAt: new Date(),
|
|
});
|
|
|
|
const user = await Users
|
|
.findOne({
|
|
id: accessToken.userId // findOne(accessToken.userId) のように書かないのは後方互換性のため
|
|
});
|
|
|
|
if (accessToken.appId) {
|
|
const app = await Apps
|
|
.findOneOrFail(accessToken.appId);
|
|
|
|
return [user, {
|
|
id: accessToken.id,
|
|
permission: app.permission
|
|
} as AccessToken];
|
|
} else {
|
|
return [user, accessToken];
|
|
}
|
|
}
|
|
};
|