mirror of
https://github.com/MisskeyIO/misskey
synced 2024-12-23 11:08:22 +09:00
1c67c26bd8
* wip * wip * wip * Update following.ts * wip * wip * wip * Update resolve-user.ts * maxQueryExecutionTime * wip * wip
67 lines
1.8 KiB
TypeScript
67 lines
1.8 KiB
TypeScript
import isNativeToken from './common/is-native-token.js';
|
|
import { CacheableLocalUser, ILocalUser } from '@/models/entities/user.js';
|
|
import { Users, AccessTokens, Apps } from '@/models/index.js';
|
|
import { AccessToken } from '@/models/entities/access-token.js';
|
|
import { Cache } from '@/misc/cache.js';
|
|
import { App } from '@/models/entities/app.js';
|
|
import { localUserByIdCache, localUserByNativeTokenCache } from '@/services/user-cache.js';
|
|
|
|
const appCache = new Cache<App>(Infinity);
|
|
|
|
export class AuthenticationError extends Error {
|
|
constructor(message: string) {
|
|
super(message);
|
|
this.name = 'AuthenticationError';
|
|
}
|
|
}
|
|
|
|
export default async (token: string | null): Promise<[CacheableLocalUser | null | undefined, AccessToken | null | undefined]> => {
|
|
if (token == null) {
|
|
return [null, null];
|
|
}
|
|
|
|
if (isNativeToken(token)) {
|
|
const user = await localUserByNativeTokenCache.fetch(token,
|
|
() => Users.findOneBy({ token }) as Promise<ILocalUser | null>);
|
|
|
|
if (user == null) {
|
|
throw new AuthenticationError('user not found');
|
|
}
|
|
|
|
return [user, null];
|
|
} else {
|
|
const accessToken = await AccessTokens.findOne({
|
|
where: [{
|
|
hash: token.toLowerCase(), // app
|
|
}, {
|
|
token: token, // miauth
|
|
}],
|
|
});
|
|
|
|
if (accessToken == null) {
|
|
throw new AuthenticationError('invalid signature');
|
|
}
|
|
|
|
AccessTokens.update(accessToken.id, {
|
|
lastUsedAt: new Date(),
|
|
});
|
|
|
|
const user = await localUserByIdCache.fetch(accessToken.userId,
|
|
() => Users.findOneBy({
|
|
id: accessToken.userId,
|
|
}) as Promise<ILocalUser>);
|
|
|
|
if (accessToken.appId) {
|
|
const app = await appCache.fetch(accessToken.appId,
|
|
() => Apps.findOneByOrFail({ id: accessToken.appId! }));
|
|
|
|
return [user, {
|
|
id: accessToken.id,
|
|
permission: app.permission,
|
|
} as AccessToken];
|
|
} else {
|
|
return [user, accessToken];
|
|
}
|
|
}
|
|
};
|