@coursebuilder/adapter-drizzle 2.1.0 → 3.0.0-canary.0.0c9beb2ae

package/src/lib/mysql/ports/auth-storage.ts

@@ -0,0 +1,139 @@
+import { addSeconds, isAfter } from 'date-fns'
+import { and, eq } from 'drizzle-orm'
+
+import type {
+	AuthStoragePort,
+	CourseBuilderAuthSession,
+} from '@coursebuilder/core/auth'
+
+import type { MySqlContext } from '../context.js'
+
+type SupportedAuthStorageMethod =
+	| 'createSession'
+	| 'getSessionAndUser'
+	| 'updateSession'
+	| 'deleteSession'
+	| 'useVerificationToken'
+	| 'deleteUser'
+
+/**
+ * Creates the MySQL implementation of auth-runtime storage.
+ *
+ * @param context - The shared MySQL client and table set.
+ * @returns Session, verification-token, and user cleanup operations.
+ *
+ * @example
+ * ```ts
+ * const authStorage = createAuthStoragePort(context)
+ * ```
+ */
+export function createAuthStoragePort({
+	client,
+	tables,
+}: MySqlContext): Required<Pick<AuthStoragePort, SupportedAuthStorageMethod>> {
+	const { accounts, sessions, users, verificationTokens } = tables
+
+	return {
+		createSession: async (data) => {
+			await client.insert(sessions).values(data)
+
+			return await client
+				.select()
+				.from(sessions)
+				.where(eq(sessions.sessionToken, data.sessionToken))
+				.then((res) => res[0] as CourseBuilderAuthSession)
+		},
+		getSessionAndUser: async (data) => {
+			return (
+				(await client
+					.select({ session: sessions, user: users })
+					.from(sessions)
+					.where(eq(sessions.sessionToken, data))
+					.innerJoin(users, eq(users.id, sessions.userId))
+					.then((res) => res[0])) ?? null
+			)
+		},
+		updateSession: async (data) => {
+			await client
+				.update(sessions)
+				.set(data)
+				.where(eq(sessions.sessionToken, data.sessionToken))
+
+			return await client
+				.select()
+				.from(sessions)
+				.where(eq(sessions.sessionToken, data.sessionToken))
+				.then((res) => res[0])
+		},
+		deleteSession: async (sessionToken) => {
+			const session =
+				(await client
+					.select()
+					.from(sessions)
+					.where(eq(sessions.sessionToken, sessionToken))
+					.then((res) => res[0])) ?? null
+
+			await client
+				.delete(sessions)
+				.where(eq(sessions.sessionToken, sessionToken))
+			return session
+		},
+		useVerificationToken: async (token) => {
+			try {
+				const deletedToken =
+					(await client
+						.select()
+						.from(verificationTokens)
+						.where(
+							and(
+								eq(verificationTokens.identifier, token.identifier),
+								eq(verificationTokens.token, token.token),
+							),
+						)
+						.then((res) => res[0])) ?? null
+
+				if (deletedToken?.createdAt) {
+					const TIMEOUT_IN_SECONDS = 90
+					const expireMultipleClicks = addSeconds(
+						deletedToken.createdAt,
+						TIMEOUT_IN_SECONDS,
+					)
+					const now = new Date()
+
+					if (isAfter(expireMultipleClicks, now)) {
+						// @ts-ignore
+						const { id: _, ...verificationToken } = token
+						return deletedToken
+					}
+
+					await client
+						.delete(verificationTokens)
+						.where(
+							and(
+								eq(verificationTokens.identifier, token.identifier),
+								eq(verificationTokens.token, token.token),
+							),
+						)
+					return deletedToken
+				}
+
+				return deletedToken
+			} catch (err) {
+				throw new Error('No verification token found.')
+			}
+		},
+		deleteUser: async (id) => {
+			const user = await client
+				.select()
+				.from(users)
+				.where(eq(users.id, id))
+				.then((res) => res[0] ?? null)
+
+			await client.delete(users).where(eq(users.id, id))
+			await client.delete(sessions).where(eq(sessions.userId, id))
+			await client.delete(accounts).where(eq(accounts.userId, id))
+
+			return user
+		},
+	}
+}