| const crypto = require('crypto'); |
| const cookies = require('cookie'); |
| const jwt = require('jsonwebtoken'); |
| const { |
| registerUser, |
| resetPassword, |
| setAuthTokens, |
| requestPasswordReset, |
| } = require('~/server/services/AuthService'); |
| const { Session, getUserById } = require('~/models'); |
| const { logger } = require('~/config'); |
|
|
| const registrationController = async (req, res) => { |
| try { |
| const response = await registerUser(req.body); |
| const { status, message } = response; |
| res.status(status).send({ message }); |
| } catch (err) { |
| logger.error('[registrationController]', err); |
| return res.status(500).json({ message: err.message }); |
| } |
| }; |
|
|
| const resetPasswordRequestController = async (req, res) => { |
| try { |
| const resetService = await requestPasswordReset(req); |
| if (resetService instanceof Error) { |
| return res.status(400).json(resetService); |
| } else { |
| return res.status(200).json(resetService); |
| } |
| } catch (e) { |
| logger.error('[resetPasswordRequestController]', e); |
| return res.status(400).json({ message: e.message }); |
| } |
| }; |
|
|
| const resetPasswordController = async (req, res) => { |
| try { |
| const resetPasswordService = await resetPassword( |
| req.body.userId, |
| req.body.token, |
| req.body.password, |
| ); |
| if (resetPasswordService instanceof Error) { |
| return res.status(400).json(resetPasswordService); |
| } else { |
| return res.status(200).json(resetPasswordService); |
| } |
| } catch (e) { |
| logger.error('[resetPasswordController]', e); |
| return res.status(400).json({ message: e.message }); |
| } |
| }; |
|
|
| const refreshController = async (req, res) => { |
| const refreshToken = req.headers.cookie ? cookies.parse(req.headers.cookie).refreshToken : null; |
| if (!refreshToken) { |
| return res.status(200).send('Refresh token not provided'); |
| } |
|
|
| try { |
| const payload = jwt.verify(refreshToken, process.env.JWT_REFRESH_SECRET); |
| const user = await getUserById(payload.id, '-password -__v'); |
| if (!user) { |
| return res.status(401).redirect('/login'); |
| } |
|
|
| const userId = payload.id; |
|
|
| if (process.env.NODE_ENV === 'CI') { |
| const token = await setAuthTokens(userId, res); |
| return res.status(200).send({ token, user }); |
| } |
|
|
| |
| const hash = crypto.createHash('sha256'); |
| const hashedToken = hash.update(refreshToken).digest('hex'); |
|
|
| |
| const session = await Session.findOne({ user: userId, refreshTokenHash: hashedToken }); |
| if (session && session.expiration > new Date()) { |
| const token = await setAuthTokens(userId, res, session._id); |
| res.status(200).send({ token, user }); |
| } else if (req?.query?.retry) { |
| |
| res.status(403).send('No session found'); |
| } else if (payload.exp < Date.now() / 1000) { |
| res.status(403).redirect('/login'); |
| } else { |
| res.status(401).send('Refresh token expired or not found for this user'); |
| } |
| } catch (err) { |
| logger.error(`[refreshController] Refresh token: ${refreshToken}`, err); |
| res.status(403).send('Invalid refresh token'); |
| } |
| }; |
|
|
| module.exports = { |
| refreshController, |
| registrationController, |
| resetPasswordController, |
| resetPasswordRequestController, |
| }; |
|
|
