mirror of https://github.com/nocodb/nocodb
github-actions[bot]
8 months ago
committed by
GitHub
36 changed files with 477 additions and 197 deletions
@ -0,0 +1,27 @@
|
||||
import type { Knex } from 'knex'; |
||||
import { MetaTable } from '~/utils/globals'; |
||||
|
||||
const up = async (knex: Knex) => { |
||||
await knex.schema.alterTable(MetaTable.USERS, (table) => { |
||||
table.dropColumn('refresh_token'); |
||||
}); |
||||
|
||||
await knex.schema.createTable(MetaTable.USER_REFRESH_TOKENS, (table) => { |
||||
table.string('fk_user_id', 20).index(); |
||||
table.string('token', 255).index(); |
||||
table.text('meta'); |
||||
|
||||
table.timestamp('expires_at').index(); |
||||
|
||||
table.timestamps(true, true); |
||||
}); |
||||
}; |
||||
|
||||
const down = async (knex: Knex) => { |
||||
await knex.schema.dropTable(MetaTable.USER_REFRESH_TOKENS); |
||||
await knex.schema.alterTable(MetaTable.USERS, (table) => { |
||||
table.string('refresh_token', 255); |
||||
}); |
||||
}; |
||||
|
||||
export { up, down }; |
||||
@ -0,0 +1,122 @@
|
||||
import process from 'process'; |
||||
import dayjs from 'dayjs'; |
||||
import Noco from '~/Noco'; |
||||
import { extractProps } from '~/helpers/extractProps'; |
||||
import { MetaTable } from '~/utils/globals'; |
||||
import { parseMetaProp, stringifyMetaProp } from '~/utils/modelUtils'; |
||||
|
||||
const NC_REFRESH_TOKEN_EXP_IN_DAYS = |
||||
parseInt(process.env.NC_REFRESH_TOKEN_EXP_IN_DAYS, 10) || 90; |
||||
|
||||
// throw error if user provided invalid value
|
||||
if (NC_REFRESH_TOKEN_EXP_IN_DAYS <= 0) { |
||||
throw new Error('NC_REFRESH_TOKEN_EXP_IN_DAYS must be a positive number'); |
||||
} |
||||
|
||||
export default class UserRefreshToken { |
||||
fk_user_id: string; |
||||
token: string; |
||||
expires_at: any; |
||||
meta?: any; |
||||
created_at?: any; |
||||
updated_at?: any; |
||||
|
||||
public static async insert( |
||||
userRefreshToken: Partial<UserRefreshToken>, |
||||
ncMeta = Noco.ncMeta, |
||||
) { |
||||
// clear old invalid tokens before inserting new one
|
||||
// todo: verify the populated sql query
|
||||
await ncMeta.metaDelete( |
||||
null, |
||||
null, |
||||
MetaTable.USER_REFRESH_TOKENS, |
||||
{ |
||||
fk_user_id: userRefreshToken.fk_user_id, |
||||
}, |
||||
{ |
||||
expires_at: { |
||||
lt: dayjs().toDate(), |
||||
}, |
||||
}, |
||||
); |
||||
|
||||
const insertObj = extractProps(userRefreshToken, [ |
||||
'fk_user_id', |
||||
'token', |
||||
'expires_at', |
||||
'meta', |
||||
]); |
||||
|
||||
// set expiry based on the env or default value
|
||||
if (!('expires_at' in insertObj)) { |
||||
insertObj.expires_at = dayjs() |
||||
.add(NC_REFRESH_TOKEN_EXP_IN_DAYS, 'day') |
||||
.toDate(); |
||||
} |
||||
|
||||
if ('meta' in insertObj) { |
||||
insertObj.meta = stringifyMetaProp(insertObj); |
||||
} |
||||
|
||||
await ncMeta.metaInsert2( |
||||
null, |
||||
null, |
||||
MetaTable.USER_REFRESH_TOKENS, |
||||
insertObj, |
||||
true, |
||||
); |
||||
return insertObj; |
||||
} |
||||
|
||||
static async updateOldToken( |
||||
oldToken: string, |
||||
newToken: string, |
||||
ncMeta = Noco.ncMeta, |
||||
) { |
||||
return await ncMeta.metaUpdate( |
||||
null, |
||||
null, |
||||
MetaTable.USER_REFRESH_TOKENS, |
||||
{ |
||||
token: newToken, |
||||
expires_at: dayjs().add(NC_REFRESH_TOKEN_EXP_IN_DAYS, 'day').toDate(), |
||||
}, |
||||
{ |
||||
token: oldToken, |
||||
}, |
||||
); |
||||
} |
||||
|
||||
static async deleteToken(token: string, ncMeta = Noco.ncMeta) { |
||||
return await ncMeta.metaDelete(null, null, MetaTable.USER_REFRESH_TOKENS, { |
||||
token, |
||||
}); |
||||
} |
||||
|
||||
static async deleteAllUserToken(userId: string, ncMeta = Noco.ncMeta) { |
||||
return await ncMeta.metaDelete(null, null, MetaTable.USER_REFRESH_TOKENS, { |
||||
fk_user_id: userId, |
||||
}); |
||||
} |
||||
|
||||
static async getByToken( |
||||
token: string, |
||||
ncMeta = Noco.ncMeta, |
||||
): Promise<UserRefreshToken> { |
||||
const userToken = await ncMeta.metaGet2( |
||||
null, |
||||
null, |
||||
MetaTable.USER_REFRESH_TOKENS, |
||||
{ |
||||
token, |
||||
}, |
||||
); |
||||
|
||||
if (!userToken) return null; |
||||
|
||||
userToken.meta = parseMetaProp(userToken); |
||||
|
||||
return userToken; |
||||
} |
||||
} |
||||
Loading…
Reference in new issue