mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-05-21 18:55:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

auth: Add cron to clean old tokens

Browse source 
Rename AuthToken.identifier to label

Signed-off-by: Philip Molares <philip.molares@udo.edu>
This commit is contained in:
Philip Molares 2021-01-24 20:37:04 +01:00
parent cc2fcac532
commit 0a3247492a
6 changed files with 27 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

21
src/auth/auth.service.ts
View file

@ -17,6 +17,7 @@ import { InjectRepository } from '@nestjs/typeorm';
import { Repository } from 'typeorm';
import { ConsoleLoggerService } from '../logger/console-logger.service';
import { TimestampMillis } from '../utils/timestamp';
import { Cron } from '@nestjs/schedule';
@Injectable()
export class AuthService {
@ -32,11 +33,11 @@ export class AuthService {
async validateToken(token: string): Promise<User> {
const [keyId, secret] = token.split('.');
const accessToken = await this.getAuthTokenAndValidate(keyId, secret);
await this.setLastUsedToken(keyId);
const user = await this.usersService.getUserByUsername(
accessToken.user.userName,
);
if (user) {
await this.setLastUsedToken(keyId);
return user;
}
return null;
@ -125,9 +126,7 @@ export class AuthService {
) {
// tokens validUntil Date lies in the past
throw new TokenNotValidError(
`AuthToken '${token}' is not valid since ${new Date(
accessToken.validUntil,
)}.`,
`AuthToken '${token}' is not valid since ${accessToken.validUntil}.`,
);
}
return accessToken;
@ -156,7 +155,7 @@ export class AuthService {
const tokenDto: AuthTokenDto = {
lastUsed: null,
validUntil: null,
label: authToken.identifier,
label: authToken.label,
keyId: authToken.keyId,
createdAt: authToken.createdAt,
};
@ -182,4 +181,16 @@ export class AuthService {
secret: secret,
};
}
// Delete all non valid tokens every sunday on 3:00 AM
@Cron('0 0 3 * * 0')
async handleCron() {
const currentTime = new Date().getTime();
const tokens: AuthToken[] = await this.authTokenRepository.find();
for (const token of tokens) {
if (token.validUntil && token.validUntil.getTime() <= currentTime) {
await this.authTokenRepository.remove(token);
}
}
}
}