imterah
d56a8eb7bf
This restructures dbcore (now the db package) and jwtcore (now the jwt package) to use a single struct. There is now a state package, which contains a struct with the full application state. After this, instead of initializing the API routes directly in the main function, the state object gets passed, and the API routes get initialized with their accompanying code. One fix done to reduce memory usage and increase speed is that the validator object is now persistent across requests, instead of recreating it each time. This should speed things up slightly, and improve memory usage. One additional chore done is that the database models have been moved to be a seperate file from the DB initialization itself.
118 lines
2.7 KiB
Go
118 lines
2.7 KiB
Go
package users
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"time"
|
|
|
|
"git.terah.dev/imterah/hermes/backend/api/db"
|
|
"git.terah.dev/imterah/hermes/backend/api/state"
|
|
"github.com/charmbracelet/log"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
type UserRefreshRequest struct {
|
|
Token string `validate:"required"`
|
|
}
|
|
|
|
func SetupRefreshUserToken(state *state.State) {
|
|
state.Engine.POST("/api/v1/users/refresh", func(c *gin.Context) {
|
|
var req UserRefreshRequest
|
|
|
|
if err := c.BindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{
|
|
"error": fmt.Sprintf("Failed to parse body: %s", err.Error()),
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
if err := state.Validator.Struct(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{
|
|
"error": fmt.Sprintf("Failed to validate body: %s", err.Error()),
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
var tokenInDatabase *db.Token
|
|
tokenRequest := state.DB.DB.Where("token = ?", req.Token).Find(&tokenInDatabase)
|
|
|
|
if tokenRequest.Error != nil {
|
|
log.Warnf("failed to find if token exists or not: %s", tokenRequest.Error.Error())
|
|
|
|
c.JSON(http.StatusInternalServerError, gin.H{
|
|
"error": "Failed to find if token exists",
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
tokenExists := tokenRequest.RowsAffected > 0
|
|
|
|
if !tokenExists {
|
|
c.JSON(http.StatusBadRequest, gin.H{
|
|
"error": "Token not found",
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
// First, we check to make sure that the key expiry is disabled before checking if the key is expired.
|
|
// Then, we check if the IP addresses differ, or if it has been 7 days since the token has been created.
|
|
if !tokenInDatabase.DisableExpiry && (c.ClientIP() != tokenInDatabase.CreationIPAddr || time.Now().Before(tokenInDatabase.CreatedAt.Add((24*7)*time.Hour))) {
|
|
c.JSON(http.StatusForbidden, gin.H{
|
|
"error": "Token has expired",
|
|
})
|
|
|
|
tx := state.DB.DB.Delete(tokenInDatabase)
|
|
|
|
if tx.Error != nil {
|
|
log.Warnf("Failed to delete expired token from database: %s", tx.Error.Error())
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
// Get the user to check if the user exists before doing anything
|
|
var user *db.User
|
|
userRequest := state.DB.DB.Where("id = ?", tokenInDatabase.UserID).Find(&user)
|
|
|
|
if tokenRequest.Error != nil {
|
|
log.Warnf("failed to find if token user or not: %s", userRequest.Error.Error())
|
|
|
|
c.JSON(http.StatusInternalServerError, gin.H{
|
|
"error": "Failed to find user",
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
userExists := userRequest.RowsAffected > 0
|
|
|
|
if !userExists {
|
|
c.JSON(http.StatusInternalServerError, gin.H{
|
|
"error": "User not found",
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
jwt, err := state.JWT.Generate(user.ID)
|
|
|
|
if err != nil {
|
|
log.Warnf("Failed to generate JWT: %s", err.Error())
|
|
|
|
c.JSON(http.StatusInternalServerError, gin.H{
|
|
"error": "Failed to generate refresh token",
|
|
})
|
|
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": true,
|
|
"token": jwt,
|
|
})
|
|
})
|
|
}
|