refactor(backend): rename auth to public-auth-token

Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>

backend/src/api/private/tokens/publicAuthTokensController.ts

@@ -0,0 +1,81 @@
+/*
+ * SPDX-FileCopyrightText: 2022 The HedgeDoc developers (see AUTHORS file)
+ *
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  Param,
+  Post,
+  UnauthorizedException,
+  UseGuards,
+} from '@nestjs/common';
+import { ApiTags } from '@nestjs/swagger';
+
+import { SessionGuard } from '../../../identity/session.guard';
+import { ConsoleLoggerService } from '../../../logger/console-logger.service';
+import {
+  PublicAuthTokenCreateDto,
+  PublicAuthTokenDto,
+  PublicAuthTokenWithSecretDto,
+} from '../../../public-auth-token/public-auth-token.dto';
+import { PublicAuthTokenService } from '../../../public-auth-token/public-auth-token.service';
+import { User } from '../../../users/user.entity';
+import { OpenApi } from '../../utils/openapi.decorator';
+import { RequestUser } from '../../utils/request-user.decorator';
+
+@UseGuards(SessionGuard)
+@OpenApi(401)
+@ApiTags('tokens')
+@Controller('tokens')
+export class PublicAuthTokensController {
+  constructor(
+    private readonly logger: ConsoleLoggerService,
+    private publicAuthTokenService: PublicAuthTokenService,
+  ) {
+    this.logger.setContext(PublicAuthTokensController.name);
+  }
+
+  @Get()
+  @OpenApi(200)
+  async getUserTokens(
+    @RequestUser() user: User,
+  ): Promise<PublicAuthTokenDto[]> {
+    return (await this.publicAuthTokenService.getTokensByUser(user)).map(
+      (token) => this.publicAuthTokenService.toAuthTokenDto(token),
+    );
+  }
+
+  @Post()
+  @OpenApi(201)
+  async postTokenRequest(
+    @Body() createDto: PublicAuthTokenCreateDto,
+    @RequestUser() user: User,
+  ): Promise<PublicAuthTokenWithSecretDto> {
+    return await this.publicAuthTokenService.addToken(
+      user,
+      createDto.label,
+      createDto.validUntil,
+    );
+  }
+
+  @Delete('/:keyId')
+  @OpenApi(204, 404)
+  async deleteToken(
+    @RequestUser() user: User,
+    @Param('keyId') keyId: string,
+  ): Promise<void> {
+    const tokens = await this.publicAuthTokenService.getTokensByUser(user);
+    for (const token of tokens) {
+      if (token.keyId == keyId) {
+        return await this.publicAuthTokenService.removeToken(keyId);
+      }
+    }
+    throw new UnauthorizedException(
+      'User is not authorized to delete this token',
+    );
+  }
+}