mirror of
https://github.com/misskey-dev/misskey
synced 2024-05-22 03:10:19 +02:00
110 lines
2.2 KiB
TypeScript
110 lines
2.2 KiB
TypeScript
/**
|
|
* Module dependencies
|
|
*/
|
|
import $ from 'cafy';
|
|
import App from '../../../models/app';
|
|
import AuthSess from '../../../models/auth-session';
|
|
import AccessToken from '../../../models/access-token';
|
|
import { pack } from '../../../models/user';
|
|
|
|
/**
|
|
* @swagger
|
|
* /auth/session/userkey:
|
|
* post:
|
|
* summary: Get an access token(userkey)
|
|
* parameters:
|
|
* -
|
|
* name: appSecret
|
|
* description: App Secret
|
|
* in: formData
|
|
* required: true
|
|
* type: string
|
|
* -
|
|
* name: token
|
|
* description: Session Token
|
|
* in: formData
|
|
* required: true
|
|
* type: string
|
|
*
|
|
* responses:
|
|
* 200:
|
|
* description: OK
|
|
* schema:
|
|
* type: object
|
|
* properties:
|
|
* userkey:
|
|
* type: string
|
|
* description: Access Token
|
|
* user:
|
|
* $ref: "#/definitions/User"
|
|
* default:
|
|
* description: Failed
|
|
* schema:
|
|
* $ref: "#/definitions/Error"
|
|
*/
|
|
|
|
/**
|
|
* Generate a session
|
|
*
|
|
* @param {any} params
|
|
* @return {Promise<any>}
|
|
*/
|
|
module.exports = (params) => new Promise(async (res, rej) => {
|
|
// Get 'appSecret' parameter
|
|
const [appSecret, appSecretErr] = $(params.appSecret).string().$;
|
|
if (appSecretErr) return rej('invalid appSecret param');
|
|
|
|
// Lookup app
|
|
const app = await App.findOne({
|
|
secret: appSecret
|
|
});
|
|
|
|
if (app == null) {
|
|
return rej('app not found');
|
|
}
|
|
|
|
// Get 'token' parameter
|
|
const [token, tokenErr] = $(params.token).string().$;
|
|
if (tokenErr) return rej('invalid token param');
|
|
|
|
// Fetch token
|
|
const session = await AuthSess
|
|
.findOne({
|
|
token: token,
|
|
appId: app._id
|
|
});
|
|
|
|
if (session === null) {
|
|
return rej('session not found');
|
|
}
|
|
|
|
if (session.userId == null) {
|
|
return rej('this session is not allowed yet');
|
|
}
|
|
|
|
// Lookup access token
|
|
const accessToken = await AccessToken.findOne({
|
|
appId: app._id,
|
|
userId: session.userId
|
|
});
|
|
|
|
// Delete session
|
|
|
|
/* https://github.com/Automattic/monk/issues/178
|
|
AuthSess.deleteOne({
|
|
_id: session._id
|
|
});
|
|
*/
|
|
AuthSess.remove({
|
|
_id: session._id
|
|
});
|
|
|
|
// Response
|
|
res({
|
|
accessToken: accessToken.token,
|
|
user: await pack(session.userId, null, {
|
|
detail: true
|
|
})
|
|
});
|
|
});
|