mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-06-02 16:09:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

private: Add until to token creation

Browse source 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
This commit is contained in:
Philip Molares 2021-01-21 12:33:45 +01:00 • committed by David Mehren
parent 324ba71d24
commit 4784a1aea2
No known key found for this signature in database
GPG key ID: 185982BA4C42B7C3
3 changed files with 20 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/users/users.service.ts
View file

@ -12,7 +12,7 @@ import { ConsoleLoggerService } from '../logger/console-logger.service';
import { UserInfoDto } from './user-info.dto';
import { User } from './user.entity';
import { AuthToken } from './auth-token.entity';
import { hash } from 'bcrypt'
import { hash, compare } from 'bcrypt'
import crypt from 'crypto';
import { AuthTokenDto } from './auth-token.dto';
import { AuthTokenWithSecretDto } from './auth-token-with-secret.dto';
@ -36,12 +36,13 @@ export class UsersService {
async createTokenForUser(
userName: string,
identifier: string,
until: number,
): Promise<AuthToken> {
const user = await this.getUserByUsername(userName);
const randomString = crypt.randomBytes(64).toString('base64');
const randomString = crypt.randomBytes(64).toString('base64url');
const accessToken = await this.hashPassword(randomString);
const token = AuthToken.create(user, identifier, accessToken);
const createdToken = this.authTokenRepository.save(token);
const token = AuthToken.create(user, identifier, accessToken, new Date(until));
const createdToken = await this.authTokenRepository.save(token);
return {
accessToken: randomString,
...createdToken,
@ -66,9 +67,14 @@ export class UsersService {
return user;
}
async hashPassword(password: string): Promise<string> {
async hashPassword(cleartext: string): Promise<string> {
// hash the password with bcrypt and 2^16 iterations
return hash(password, 16)
return hash(cleartext, 16)
}
async checkPassword(cleartext: string, password: string): Promise<boolean> {
// hash the password with bcrypt and 2^16 iterations
return compare(cleartext, password)
}
async getUserByAuthToken(token: string): Promise<User> {