package.json

@@ -28,7 +28,6 @@
     "class-validator": "^0.12.2",
     "class-validator-jsonschema": "^2.0.3",
     "consola": "^2.15.0",
-    "cookie-parser": "^1.4.5",
     "cors": "^2.8.5",
     "dotenv": "^8.2.0",
     "express": "^4.17.1",
@@ -77,4 +76,4 @@
       "docs/*"
     ]
   }
-}
+}

src/controllers/AuthController.ts

@@ -1,4 +1,4 @@
-import { Body, CookieParam, JsonController, Post, Res } from 'routing-controllers';
+import { Body, JsonController, Post } from 'routing-controllers';
 import { OpenAPI, ResponseSchema } from 'routing-controllers-openapi';
 import { IllegalJWTError, InvalidCredentialsError, JwtNotProvidedError, PasswordNeededError, RefreshTokenCountInvalidError, UsernameOrEmailNeededError } from '../errors/AuthError';
 import { UserNotFoundError } from '../errors/UserErrors';
@@ -21,16 +21,14 @@ export class AuthController {
 	@ResponseSchema(PasswordNeededError)
 	@ResponseSchema(InvalidCredentialsError)
 	@OpenAPI({ description: 'Create a new access token object' })
-	async login(@Body({ validate: true }) createAuth: CreateAuth, @Res() response: any) {
+	async login(@Body({ validate: true }) createAuth: CreateAuth) {
 		let auth;
 		try {
 			auth = await createAuth.toAuth();
-			response.cookie('lfk_backend__refresh_token', auth.refresh_token, { expires: new Date(auth.refresh_token_expires_at * 1000), httpOnly: true });
-			response.cookie('lfk_backend__refresh_token_expires_at', auth.refresh_token_expires_at, { expires: new Date(auth.refresh_token_expires_at * 1000), httpOnly: true });
-			return response.send(auth)
 		} catch (error) {
 			throw error;
 		}
+		return auth
 	}
 
 	@Post("/logout")
@@ -41,20 +39,14 @@ export class AuthController {
 	@ResponseSchema(PasswordNeededError)
 	@ResponseSchema(InvalidCredentialsError)
 	@OpenAPI({ description: 'Create a new access token object' })
-	async logout(@Body({ validate: true }) handleLogout: HandleLogout, @CookieParam("lfk_backend__refresh_token") refresh_token: string, @Res() response: any) {
+	async logout(@Body({ validate: true }) handleLogout: HandleLogout) {
-		if (refresh_token && refresh_token.length != 0 && handleLogout.token == undefined) {
-			handleLogout.token = refresh_token;
-		}
-
 		let logout;
 		try {
 			logout = await handleLogout.logout()
-			await response.cookie('lfk_backend__refresh_token', "expired", { expires: new Date(Date.now()), httpOnly: true });
-			response.cookie('lfk_backend__refresh_token_expires_at', "expired", { expires: new Date(Date.now()), httpOnly: true });
 		} catch (error) {
-			throw error;
+			return error;
 		}
-		return response.send(logout)
+		return logout
 	}
 
 	@Post("/refresh")
@@ -64,18 +56,13 @@ export class AuthController {
 	@ResponseSchema(UserNotFoundError)
 	@ResponseSchema(RefreshTokenCountInvalidError)
 	@OpenAPI({ description: 'refresh a access token' })
-	async refresh(@Body({ validate: true }) refreshAuth: RefreshAuth, @CookieParam("lfk_backend__refresh_token") refresh_token: string, @Res() response: any) {
+	async refresh(@Body({ validate: true }) refreshAuth: RefreshAuth) {
-		if (refresh_token && refresh_token.length != 0 && refreshAuth.token == undefined) {
-			refreshAuth.token = refresh_token;
-		}
 		let auth;
 		try {
 			auth = await refreshAuth.toAuth();
-			response.cookie('lfk_backend__refresh_token', auth.refresh_token, { expires: new Date(auth.refresh_token_expires_at * 1000), httpOnly: true });
-			response.cookie('lfk_backend__refresh_token_expires_at', auth.refresh_token_expires_at, { expires: new Date(auth.refresh_token_expires_at * 1000), httpOnly: true });
 		} catch (error) {
-			throw error;
+			return error;
 		}
-		return response.send(auth)
+		return auth
 	}
 }

src/loaders/express.ts

@@ -1,11 +1,10 @@
-import cookieParser from "cookie-parser";
 import { Application } from "express";
+
 /**
  * Loader for express related configurations.
  * Currently only enables the proxy trust.
  */
 export default async (app: Application) => {
 	app.enable('trust proxy');
-	app.use(cookieParser());
 	return app;
 };

src/models/actions/HandleLogout.ts

@@ -1,4 +1,4 @@
-import { IsOptional, IsString } from 'class-validator';
+import { IsString } from 'class-validator';
 import * as jsonwebtoken from 'jsonwebtoken';
 import { getConnectionManager } from 'typeorm';
 import { config } from '../../config';
@@ -8,8 +8,7 @@ import { Logout } from '../responses/ResponseLogout';
 
 export class HandleLogout {
     @IsString()
-    @IsOptional()
+    token: string;
-    token?: string;
 
     public async logout(): Promise<Logout> {
         let logout: Logout = new Logout();

src/models/actions/RefreshAuth.ts

@@ -1,4 +1,4 @@
-import { IsOptional, IsString } from 'class-validator';
+import { IsString } from 'class-validator';
 import * as jsonwebtoken from 'jsonwebtoken';
 import { getConnectionManager } from 'typeorm';
 import { config } from '../../config';
@@ -8,8 +8,7 @@ import { Auth } from '../responses/ResponseAuth';
 
 export class RefreshAuth {
     @IsString()
-    @IsOptional()
+    token: string;
-    token?: string;
 
     public async toAuth(): Promise<Auth> {
         let newAuth: Auth = new Auth();