|
|
|
@ -1,5 +1,3 @@ |
|
|
|
import { promisify } from 'util'; |
|
|
|
|
|
|
|
import { AuditOperationSubTypes, AuditOperationTypes } from 'nocodb-sdk'; |
|
|
|
|
|
|
|
import { |
|
|
|
import { |
|
|
|
Body, |
|
|
|
Body, |
|
|
|
Controller, |
|
|
|
Controller, |
|
|
|
@ -19,23 +17,17 @@ import { |
|
|
|
Acl, |
|
|
|
Acl, |
|
|
|
ExtractProjectIdMiddleware, |
|
|
|
ExtractProjectIdMiddleware, |
|
|
|
} from '../../middlewares/extract-project-id/extract-project-id.middleware'; |
|
|
|
} from '../../middlewares/extract-project-id/extract-project-id.middleware'; |
|
|
|
import Noco from '../../Noco'; |
|
|
|
import { User } from '../../models'; |
|
|
|
import { GoogleStrategy } from '../../strategies/google.strategy/google.strategy'; |
|
|
|
|
|
|
|
import extractRolesObj from '../../utils/extractRolesObj'; |
|
|
|
|
|
|
|
import { Audit, User } from '../../models'; |
|
|
|
|
|
|
|
import { |
|
|
|
import { |
|
|
|
genJwt, |
|
|
|
|
|
|
|
randomTokenString, |
|
|
|
randomTokenString, |
|
|
|
setTokenCookie, |
|
|
|
setTokenCookie, |
|
|
|
} from '../../services/users/helpers'; |
|
|
|
} from '../../services/users/helpers'; |
|
|
|
import { UsersService } from '../../services/users/users.service'; |
|
|
|
import { UsersService } from '../../services/users/users.service'; |
|
|
|
|
|
|
|
import extractRolesObj from '../../utils/extractRolesObj'; |
|
|
|
|
|
|
|
|
|
|
|
@Controller() |
|
|
|
@Controller() |
|
|
|
export class UsersController { |
|
|
|
export class UsersController { |
|
|
|
constructor( |
|
|
|
constructor(private readonly usersService: UsersService) {} |
|
|
|
private readonly usersService: UsersService, |
|
|
|
|
|
|
|
private googleStrategy: GoogleStrategy, |
|
|
|
|
|
|
|
) {} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@Post([ |
|
|
|
@Post([ |
|
|
|
'/auth/user/signup', |
|
|
|
'/auth/user/signup', |
|
|
|
@ -59,56 +51,14 @@ export class UsersController { |
|
|
|
'/api/v1/auth/token/refresh', |
|
|
|
'/api/v1/auth/token/refresh', |
|
|
|
]) |
|
|
|
]) |
|
|
|
@HttpCode(200) |
|
|
|
@HttpCode(200) |
|
|
|
async refreshToken(@Request() req: any, @Request() res: any): Promise<any> { |
|
|
|
async refreshToken(@Request() req: any, @Response() res: any): Promise<any> { |
|
|
|
return await this.usersService.refreshToken({ |
|
|
|
res.json( |
|
|
|
body: req.body, |
|
|
|
await this.usersService.refreshToken({ |
|
|
|
req, |
|
|
|
body: req.body, |
|
|
|
res, |
|
|
|
req, |
|
|
|
}); |
|
|
|
res, |
|
|
|
} |
|
|
|
}), |
|
|
|
|
|
|
|
); |
|
|
|
async successfulSignIn({ user, err, info, req, res, auditDescription }) { |
|
|
|
|
|
|
|
try { |
|
|
|
|
|
|
|
if (!user || !user.email) { |
|
|
|
|
|
|
|
if (err) { |
|
|
|
|
|
|
|
return res.status(400).send(err); |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
if (info) { |
|
|
|
|
|
|
|
return res.status(400).send(info); |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
return res.status(400).send({ msg: 'Your signin has failed' }); |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
await promisify((req as any).login.bind(req))(user); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
const refreshToken = randomTokenString(); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if (!user.token_version) { |
|
|
|
|
|
|
|
user.token_version = randomTokenString(); |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
await User.update(user.id, { |
|
|
|
|
|
|
|
refresh_token: refreshToken, |
|
|
|
|
|
|
|
email: user.email, |
|
|
|
|
|
|
|
token_version: user.token_version, |
|
|
|
|
|
|
|
}); |
|
|
|
|
|
|
|
setTokenCookie(res, refreshToken); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
await Audit.insert({ |
|
|
|
|
|
|
|
op_type: AuditOperationTypes.AUTHENTICATION, |
|
|
|
|
|
|
|
op_sub_type: AuditOperationSubTypes.SIGNIN, |
|
|
|
|
|
|
|
user: user.email, |
|
|
|
|
|
|
|
ip: req.clientIp, |
|
|
|
|
|
|
|
description: auditDescription, |
|
|
|
|
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
res.json({ |
|
|
|
|
|
|
|
token: genJwt(user, Noco.getConfig()), |
|
|
|
|
|
|
|
} as any); |
|
|
|
|
|
|
|
} catch (e) { |
|
|
|
|
|
|
|
console.log(e); |
|
|
|
|
|
|
|
throw e; |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@Post([ |
|
|
|
@Post([ |
|
|
|
@ -118,8 +68,9 @@ export class UsersController { |
|
|
|
]) |
|
|
|
]) |
|
|
|
@UseGuards(AuthGuard('local')) |
|
|
|
@UseGuards(AuthGuard('local')) |
|
|
|
@HttpCode(200) |
|
|
|
@HttpCode(200) |
|
|
|
async signin(@Request() req) { |
|
|
|
async signin(@Request() req, @Response() res) { |
|
|
|
return this.usersService.login(req.user); |
|
|
|
await this.setRefreshToken({ req, res }); |
|
|
|
|
|
|
|
res.json(this.usersService.login(req.user)); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@Post('/api/v1/auth/user/signout') |
|
|
|
@Post('/api/v1/auth/user/signout') |
|
|
|
@ -136,18 +87,15 @@ export class UsersController { |
|
|
|
@Post(`/auth/google/genTokenByCode`) |
|
|
|
@Post(`/auth/google/genTokenByCode`) |
|
|
|
@HttpCode(200) |
|
|
|
@HttpCode(200) |
|
|
|
@UseGuards(AuthGuard('google')) |
|
|
|
@UseGuards(AuthGuard('google')) |
|
|
|
async googleSignin(@Request() req) { |
|
|
|
async googleSignin(@Request() req, @Response() res) { |
|
|
|
return this.usersService.login(req.user); |
|
|
|
await this.setRefreshToken({ req, res }); |
|
|
|
|
|
|
|
res.json(this.usersService.login(req.user)); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@Get('/auth/google') |
|
|
|
@Get('/auth/google') |
|
|
|
@UseGuards(AuthGuard('google')) |
|
|
|
@UseGuards(AuthGuard('google')) |
|
|
|
googleAuthenticate(@Request() req) { |
|
|
|
googleAuthenticate() { |
|
|
|
// this.googleStrategy.authenticate(req, {
|
|
|
|
// google strategy will take care the request
|
|
|
|
// scope: ['profile', 'email'],
|
|
|
|
|
|
|
|
// state: req.query.state,
|
|
|
|
|
|
|
|
// callbackURL: req.ncSiteUrl + Noco.getConfig().dashboardPath,
|
|
|
|
|
|
|
|
// });
|
|
|
|
|
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@Get(['/auth/user/me', '/api/v1/db/auth/user/me', '/api/v1/auth/user/me']) |
|
|
|
@Get(['/auth/user/me', '/api/v1/db/auth/user/me', '/api/v1/auth/user/me']) |
|
|
|
@ -168,7 +116,7 @@ export class UsersController { |
|
|
|
@UseGuards(GlobalGuard) |
|
|
|
@UseGuards(GlobalGuard) |
|
|
|
@Acl('passwordChange') |
|
|
|
@Acl('passwordChange') |
|
|
|
@HttpCode(200) |
|
|
|
@HttpCode(200) |
|
|
|
async passwordChange(@Request() req: any, @Body() body: any): Promise<any> { |
|
|
|
async passwordChange(@Request() req: any): Promise<any> { |
|
|
|
if (!(req as any).isAuthenticated()) { |
|
|
|
if (!(req as any).isAuthenticated()) { |
|
|
|
NcError.forbidden('Not allowed'); |
|
|
|
NcError.forbidden('Not allowed'); |
|
|
|
} |
|
|
|
} |
|
|
|
@ -188,7 +136,7 @@ export class UsersController { |
|
|
|
'/api/v1/auth/password/forgot', |
|
|
|
'/api/v1/auth/password/forgot', |
|
|
|
]) |
|
|
|
]) |
|
|
|
@HttpCode(200) |
|
|
|
@HttpCode(200) |
|
|
|
async passwordForgot(@Request() req: any, @Body() body: any): Promise<any> { |
|
|
|
async passwordForgot(@Request() req: any): Promise<any> { |
|
|
|
await this.usersService.passwordForgot({ |
|
|
|
await this.usersService.passwordForgot({ |
|
|
|
siteUrl: (req as any).ncSiteUrl, |
|
|
|
siteUrl: (req as any).ncSiteUrl, |
|
|
|
body: req.body, |
|
|
|
body: req.body, |
|
|
|
@ -269,4 +217,27 @@ export class UsersController { |
|
|
|
return res.status(400).json({ msg: e.message }); |
|
|
|
return res.status(400).json({ msg: e.message }); |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
async setRefreshToken({ res, req }) { |
|
|
|
|
|
|
|
const userId = req.user?.id; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if (!userId) return; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
const user = await User.get(userId); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if (!user) return; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
const refreshToken = randomTokenString(); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if (!user.token_version) { |
|
|
|
|
|
|
|
user.token_version = randomTokenString(); |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
await User.update(user.id, { |
|
|
|
|
|
|
|
refresh_token: refreshToken, |
|
|
|
|
|
|
|
email: user.email, |
|
|
|
|
|
|
|
token_version: user.token_version, |
|
|
|
|
|
|
|
}); |
|
|
|
|
|
|
|
setTokenCookie(res, refreshToken); |
|
|
|
|
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
github-actions[bot]
1 year ago
committed by
GitHub