lfk
/
backend
2
0
Fork 0
Code Issues 1 Pull Requests Projects Releases 40 Wiki Activity

🚧 CreateAuth - credential validation 

ref #12
This commit is contained in:
Philipp Dormann 2020-12-05 11:18:12 +01:00
parent d46ad59546
commit bd0c7ce042
1 changed files with 19 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/models/creation/CreateAuth.ts
View File

@ -1,7 +1,8 @@
import * as argon2 from "argon2";
import { IsEmail, IsOptional, IsString } from 'class-validator'; import { IsEmail, IsOptional, IsString } from 'class-validator';
import * as jsonwebtoken from 'jsonwebtoken'; import * as jsonwebtoken from 'jsonwebtoken';
import { getConnectionManager } from 'typeorm'; import { getConnectionManager } from 'typeorm';
import { PasswordNeededError, UserNotFoundError } from '../../errors/AuthError'; import { InvalidCredentialsError, PasswordNeededError, UserNotFoundError } from '../../errors/AuthError';
import { UsernameOrEmailNeededError } from '../../errors/UserErrors'; import { UsernameOrEmailNeededError } from '../../errors/UserErrors';
import { Auth } from '../entities/Auth'; import { Auth } from '../entities/Auth';
import { User } from '../entities/User'; import { User } from '../entities/User';
@ -31,12 +32,23 @@ export class CreateAuth {
throw new UserNotFoundError() throw new UserNotFoundError()
} else { } else {
const found_user = found_users[0] const found_user = found_users[0]
// TODO: proper jwt creation console.log(found_user.password);
const token = jsonwebtoken.sign({}, "securekey") // try {
newAuth.access_token = token if (await argon2.verify(found_user.password, this.password + found_user.uuid)) {
newAuth.refresh_token = token // password match
newAuth.access_token_expires_at = 1587349200 // TODO: proper jwt creation
newAuth.refresh_token_expires_at = 1587349200 const token = jsonwebtoken.sign({}, "securekey")
newAuth.access_token = token
newAuth.refresh_token = token
newAuth.access_token_expires_at = 1587349200
newAuth.refresh_token_expires_at = 1587349200
} else {
// password did not match
throw new InvalidCredentialsError()
}
// } catch (err) {
// // internal failure
// }
} }
return newAuth; return newAuth;