@fastybird/smart-panel-backend 1.1.0-alpha.40 → 1.1.0-alpha.41
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/modules/auth/auth.module.js +4 -0
- package/dist/modules/auth/auth.module.js.map +1 -1
- package/dist/modules/auth/guards/auth.guard.js +8 -13
- package/dist/modules/auth/guards/auth.guard.js.map +1 -1
- package/dist/modules/auth/services/token-metadata.service.d.ts +42 -0
- package/dist/modules/auth/services/token-metadata.service.js +202 -0
- package/dist/modules/auth/services/token-metadata.service.js.map +1 -0
- package/dist/modules/auth/services/token-usage.service.d.ts +22 -0
- package/dist/modules/auth/services/token-usage.service.js +93 -0
- package/dist/modules/auth/services/token-usage.service.js.map +1 -0
- package/dist/modules/auth/services/tokens.service.d.ts +8 -2
- package/dist/modules/auth/services/tokens.service.js +16 -10
- package/dist/modules/auth/services/tokens.service.js.map +1 -1
- package/dist/modules/devices/devices.module.js +7 -0
- package/dist/modules/devices/devices.module.js.map +1 -1
- package/dist/modules/devices/dto/property-command.dto.js +2 -8
- package/dist/modules/devices/dto/property-command.dto.js.map +1 -1
- package/dist/modules/devices/services/device-command-graph.service.d.ts +18 -0
- package/dist/modules/devices/services/device-command-graph.service.js +92 -0
- package/dist/modules/devices/services/device-command-graph.service.js.map +1 -0
- package/dist/modules/devices/services/devices.service.js +2 -17
- package/dist/modules/devices/services/devices.service.js.map +1 -1
- package/dist/modules/devices/services/property-command-dispatch.service.d.ts +5 -3
- package/dist/modules/devices/services/property-command-dispatch.service.js +15 -12
- package/dist/modules/devices/services/property-command-dispatch.service.js.map +1 -1
- package/dist/modules/devices/services/property-command.service.d.ts +7 -5
- package/dist/modules/devices/services/property-command.service.js +41 -20
- package/dist/modules/devices/services/property-command.service.js.map +1 -1
- package/dist/modules/devices/services/property-metadata.service.d.ts +9 -2
- package/dist/modules/devices/services/property-metadata.service.js +67 -17
- package/dist/modules/devices/services/property-metadata.service.js.map +1 -1
- package/dist/modules/devices/utils/device-graph-query.utils.d.ts +3 -0
- package/dist/modules/devices/utils/device-graph-query.utils.js +23 -0
- package/dist/modules/devices/utils/device-graph-query.utils.js.map +1 -0
- package/dist/modules/devices/validators/property-command-target-constraint.validator.d.ts +9 -0
- package/dist/modules/devices/validators/property-command-target-constraint.validator.js +58 -0
- package/dist/modules/devices/validators/property-command-target-constraint.validator.js.map +1 -0
- package/dist/modules/spaces/services/module-reset.service.d.ts +5 -1
- package/dist/modules/spaces/services/module-reset.service.js +10 -2
- package/dist/modules/spaces/services/module-reset.service.js.map +1 -1
- package/dist/modules/spaces/services/space-activity.service.d.ts +14 -0
- package/dist/modules/spaces/services/space-activity.service.js +56 -0
- package/dist/modules/spaces/services/space-activity.service.js.map +1 -0
- package/dist/modules/spaces/spaces.module.js +5 -0
- package/dist/modules/spaces/spaces.module.js.map +1 -1
- package/dist/modules/spaces/subscribers/space-activity.subscriber.d.ts +17 -0
- package/dist/modules/spaces/subscribers/space-activity.subscriber.js +89 -0
- package/dist/modules/spaces/subscribers/space-activity.subscriber.js.map +1 -0
- package/dist/modules/websocket/services/ws-auth.service.js +12 -28
- package/dist/modules/websocket/services/ws-auth.service.js.map +1 -1
- package/dist/plugins/devices-virtual/platforms/virtual-device.platform.d.ts +3 -8
- package/dist/plugins/devices-virtual/platforms/virtual-device.platform.js +6 -36
- package/dist/plugins/devices-virtual/platforms/virtual-device.platform.js.map +1 -1
- package/dist/plugins/spaces-home-control/listeners/space-activity.listener.d.ts +6 -7
- package/dist/plugins/spaces-home-control/listeners/space-activity.listener.js +19 -44
- package/dist/plugins/spaces-home-control/listeners/space-activity.listener.js.map +1 -1
- package/dist/plugins/spaces-home-control/listeners/space-climate-state.listener.d.ts +4 -4
- package/dist/plugins/spaces-home-control/listeners/space-climate-state.listener.js +9 -22
- package/dist/plugins/spaces-home-control/listeners/space-climate-state.listener.js.map +1 -1
- package/dist/plugins/spaces-home-control/listeners/space-lighting-state.listener.d.ts +4 -4
- package/dist/plugins/spaces-home-control/listeners/space-lighting-state.listener.js +9 -22
- package/dist/plugins/spaces-home-control/listeners/space-lighting-state.listener.js.map +1 -1
- package/dist/plugins/spaces-home-control/listeners/space-sensor-state.listener.d.ts +4 -4
- package/dist/plugins/spaces-home-control/listeners/space-sensor-state.listener.js +9 -22
- package/dist/plugins/spaces-home-control/listeners/space-sensor-state.listener.js.map +1 -1
- package/dist/plugins/spaces-home-control/services/space-climate-state.service.d.ts +3 -5
- package/dist/plugins/spaces-home-control/services/space-climate-state.service.js +9 -12
- package/dist/plugins/spaces-home-control/services/space-climate-state.service.js.map +1 -1
- package/dist/plugins/spaces-home-control/services/space-lighting-state.service.d.ts +3 -5
- package/dist/plugins/spaces-home-control/services/space-lighting-state.service.js +7 -10
- package/dist/plugins/spaces-home-control/services/space-lighting-state.service.js.map +1 -1
- package/dist/plugins/spaces-home-control/services/space-sensor-state.service.d.ts +3 -5
- package/dist/plugins/spaces-home-control/services/space-sensor-state.service.js +7 -10
- package/dist/plugins/spaces-home-control/services/space-sensor-state.service.js.map +1 -1
- package/dist/plugins/spaces-home-control/services/space-state-read.service.d.ts +47 -0
- package/dist/plugins/spaces-home-control/services/space-state-read.service.js +262 -0
- package/dist/plugins/spaces-home-control/services/space-state-read.service.js.map +1 -0
- package/dist/plugins/spaces-home-control/spaces-home-control.plugin.js +4 -0
- package/dist/plugins/spaces-home-control/spaces-home-control.plugin.js.map +1 -1
- package/dist/tsconfig.build.tsbuildinfo +1 -1
- package/package.json +2 -2
|
@@ -41,6 +41,8 @@ const auth_entity_1 = require("./entities/auth.entity");
|
|
|
41
41
|
const config_model_1 = require("./models/config.model");
|
|
42
42
|
const auth_service_1 = require("./services/auth.service");
|
|
43
43
|
const crypto_service_1 = require("./services/crypto.service");
|
|
44
|
+
const token_metadata_service_1 = require("./services/token-metadata.service");
|
|
45
|
+
const token_usage_service_1 = require("./services/token-usage.service");
|
|
44
46
|
const tokens_type_mapper_service_1 = require("./services/tokens-type-mapper.service");
|
|
45
47
|
const tokens_service_1 = require("./services/tokens.service");
|
|
46
48
|
let AuthModule = class AuthModule {
|
|
@@ -168,6 +170,8 @@ exports.AuthModule = AuthModule = __decorate([
|
|
|
168
170
|
providers: [
|
|
169
171
|
auth_service_1.AuthService,
|
|
170
172
|
tokens_service_1.TokensService,
|
|
173
|
+
token_usage_service_1.TokenUsageService,
|
|
174
|
+
token_metadata_service_1.TokenMetadataService,
|
|
171
175
|
crypto_service_1.CryptoService,
|
|
172
176
|
tokens_type_mapper_service_1.TokensTypeMapperService,
|
|
173
177
|
register_owner_command_1.RegisterOwnerCommand,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../src/modules/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAA4B;AAE5B,yDAAoD;AACpD,2CAA8D;AAC9D,2CAAsG;AACtG,qCAAwC;AACxC,6CAAgD;AAEhD,uDAAqF;AACrF,kEAA8D;AAC9D,kDAA8C;AAC9C,gGAA0F;AAC1F,kFAA8E;AAC9E,+EAAiE;AACjE,yGAAmG;AACnG,8DAA0D;AAC1D,wDAAoD;AAEpD,qDAK0B;AAC1B,iDAA2D;AAC3D,8EAAyE;AACzE,8EAAyE;AACzE,mEAA+D;AAC/D,uEAAmE;AACnE,6DAA6G;AAC7G,+DAA8D;AAC9D,6DAA6G;AAC7G,wDAAiH;AACjH,wDAAwD;AACxD,0DAAsD;AACtD,8DAA0D;AAC1D,sFAAgF;AAChF,8DAA0D;
|
|
1
|
+
{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../src/modules/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAA4B;AAE5B,yDAAoD;AACpD,2CAA8D;AAC9D,2CAAsG;AACtG,qCAAwC;AACxC,6CAAgD;AAEhD,uDAAqF;AACrF,kEAA8D;AAC9D,kDAA8C;AAC9C,gGAA0F;AAC1F,kFAA8E;AAC9E,+EAAiE;AACjE,yGAAmG;AACnG,8DAA0D;AAC1D,wDAAoD;AAEpD,qDAK0B;AAC1B,iDAA2D;AAC3D,8EAAyE;AACzE,8EAAyE;AACzE,mEAA+D;AAC/D,uEAAmE;AACnE,6DAA6G;AAC7G,+DAA8D;AAC9D,6DAA6G;AAC7G,wDAAiH;AACjH,wDAAwD;AACxD,0DAAsD;AACtD,8DAA0D;AAC1D,8EAAyE;AACzE,wEAAmE;AACnE,sFAAgF;AAChF,8DAA0D;AAiEnD,IAAM,UAAU,GAAhB,MAAM,UAAU;IACtB,YACkB,MAA+B,EAC/B,eAA6C,EAC7C,oBAA8C,EAC9C,iBAAoC;QAHpC,WAAM,GAAN,MAAM,CAAyB;QAC/B,oBAAe,GAAf,eAAe,CAA8B;QAC7C,yBAAoB,GAApB,oBAAoB,CAA0B;QAC9C,sBAAiB,GAAjB,iBAAiB,CAAmB;IACnD,CAAC;IAEJ,YAAY;QACX,IAAI,CAAC,MAAM,CAAC,eAAe,CAAgE;YAC1F,IAAI,EAAE,0BAAS,CAAC,MAAM;YACtB,KAAK,EAAE,+BAAiB;YACxB,SAAS,EAAE,uCAAoB;YAC/B,SAAS,EAAE,uCAAoB;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,eAAe,CAAmE;YAC7F,IAAI,EAAE,0BAAS,CAAC,OAAO;YACvB,KAAK,EAAE,gCAAkB;YACzB,SAAS,EAAE,wCAAqB;YAChC,SAAS,EAAE,wCAAqB;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,eAAe,CAAsE;YAChG,IAAI,EAAE,0BAAS,CAAC,SAAS;YACzB,KAAK,EAAE,iCAAmB;YAC1B,SAAS,EAAE,yCAAsB;YACjC,SAAS,EAAE,yCAAsB;SACjC,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,wCAAyB,EAAE,CAAC;YAC/C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAGD,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAuC;YAC/E,IAAI,EAAE,iCAAgB;YACtB,KAAK,EAAE,8BAAe;YACtB,SAAS,EAAE,uCAAmB;SAC9B,CAAC,CAAC;QAGH,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC;YAC7C,IAAI,EAAE,iCAAgB;YACtB,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,qCAAqC;YAClD,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2GAqCgG;YACxG,KAAK,EAAE;gBACN,aAAa,EAAE,wCAAwC;gBACvD,UAAU,EAAE,0CAA0C;aACtD;SACD,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AA3FY,gCAAU;qBAAV,UAAU;IA/DtB,IAAA,0BAAM,EAAC;QACP,OAAO,EAAE,iCAAgB;QACzB,WAAW,EAAE,yCAAwB;QACrC,WAAW,EAAE,gDAA+B;KAC5C,CAAC;IACD,IAAA,eAAM,EAAC;QACP,OAAO,EAAE;YACR,eAAS,CAAC,aAAa,CAAC;gBACvB,OAAO,EAAE,CAAC,qBAAgB,CAAC;gBAC3B,MAAM,EAAE,CAAC,sBAAiB,CAAC;gBAC3B,UAAU,EAAE,CAAC,aAAgC,EAAE,EAAE;oBAChD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,YAAY,CAAC,CAAC;oBAExC,IAAI,MAAM,GAAG,IAAA,0BAAW,EAAqB,aAAa,EAAE,iBAAiB,EAAE,oCAAoB,CAAC,CAAC;oBAErG,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,oCAAoB,EAAE,CAAC;wBAChD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAS,UAAU,CAAC,CAAC;wBAEtD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;4BAC9B,MAAM,CAAC,KAAK,CACX,yDAAyD;gCACxD,8EAA8E;gCAC9E,2DAA2D,CAC5D,CAAC;wBACH,CAAC;wBAED,MAAM,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;wBAEnD,MAAM,CAAC,IAAI,CACV,yGAAyG,CACzG,CAAC;oBACH,CAAC;oBAED,OAAO;wBACN,MAAM;wBACN,WAAW,EAAE,EAAE,SAAS,EAAE,wCAAwB,EAAE;qBACpD,CAAC;gBACH,CAAC;aACD,CAAC;YACF,qBAAgB;YAChB,uBAAa,CAAC,UAAU,CAAC,CAAC,yBAAW,EAAE,+BAAiB,EAAE,gCAAkB,EAAE,iCAAmB,CAAC,CAAC;YACnG,2BAAW,CAAC,QAAQ,EAAE;YACtB,8BAAa;YACb,0BAAW;YACX,sBAAS;SACT;QACD,SAAS,EAAE;YACV,0BAAW;YACX,8BAAa;YACb,uCAAiB;YACjB,6CAAoB;YACpB,8BAAa;YACb,oDAAuB;YACvB,6CAAoB;YACpB,6CAAoB;SACpB;QACD,WAAW,EAAE,CAAC,gCAAc,EAAE,oCAAgB,CAAC;QAK/C,OAAO,EAAE,CAAC,0BAAW,EAAE,8BAAa,EAAE,8BAAa,EAAE,oDAAuB,EAAE,eAAS,CAAC;KACxF,CAAC;qCAGyB,oDAAuB;QACd,8DAA4B;QACvB,sDAAwB;QAC3B,sCAAiB;GAL1C,UAAU,CA2FtB"}
|
|
@@ -115,22 +115,17 @@ let AuthGuard = class AuthGuard {
|
|
|
115
115
|
return this.validateLongLiveToken(request, token);
|
|
116
116
|
}
|
|
117
117
|
async validateUserAccessToken(request, token, userId) {
|
|
118
|
-
const storedAccessToken = await this.tokensService.
|
|
118
|
+
const storedAccessToken = await this.tokensService.findAuthenticationAccessToken(userId, (0, token_utils_1.hashToken)(token));
|
|
119
119
|
if (!storedAccessToken) {
|
|
120
120
|
this.logger.warn('Access token not found in database');
|
|
121
121
|
throw new common_1.UnauthorizedException('Token not found');
|
|
122
122
|
}
|
|
123
|
-
if (storedAccessToken.revoked || storedAccessToken.
|
|
123
|
+
if (storedAccessToken.revoked || storedAccessToken.refreshRevoked) {
|
|
124
124
|
this.logger.warn('Access token is revoked');
|
|
125
125
|
throw new common_1.UnauthorizedException('Token revoked');
|
|
126
126
|
}
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
user = await this.usersService.getOneOrThrow(userId);
|
|
130
|
-
}
|
|
131
|
-
catch (error) {
|
|
132
|
-
const err = error;
|
|
133
|
-
this.logger.warn('Token valid, but user not found', { message: err.message, stack: err.stack });
|
|
127
|
+
const user = storedAccessToken.owner;
|
|
128
|
+
if (!user || user.id !== userId) {
|
|
134
129
|
throw new common_1.UnauthorizedException('Invalid user');
|
|
135
130
|
}
|
|
136
131
|
request.auth = { type: 'user', id: user.id, role: user.role };
|
|
@@ -139,7 +134,7 @@ let AuthGuard = class AuthGuard {
|
|
|
139
134
|
}
|
|
140
135
|
async validateDisplayToken(request, token, _displayId) {
|
|
141
136
|
const hashedValue = (0, token_utils_1.hashToken)(token);
|
|
142
|
-
const storedToken = await this.tokensService.
|
|
137
|
+
const storedToken = await this.tokensService.findAuthenticationTokenByHash(hashedValue);
|
|
143
138
|
if (!storedToken) {
|
|
144
139
|
this.logger.warn('Display token not found in database');
|
|
145
140
|
throw new common_1.UnauthorizedException('Token not found');
|
|
@@ -155,7 +150,7 @@ let AuthGuard = class AuthGuard {
|
|
|
155
150
|
if (storedToken.ownerType !== auth_constants_1.TokenOwnerType.DISPLAY || storedToken.ownerId !== _displayId) {
|
|
156
151
|
throw new common_1.UnauthorizedException('Invalid display token owner');
|
|
157
152
|
}
|
|
158
|
-
|
|
153
|
+
this.tokensService.recordUsage(storedToken);
|
|
159
154
|
request.auth = {
|
|
160
155
|
type: 'token',
|
|
161
156
|
tokenId: storedToken.id,
|
|
@@ -168,7 +163,7 @@ let AuthGuard = class AuthGuard {
|
|
|
168
163
|
}
|
|
169
164
|
async validateLongLiveToken(request, token, expectedOwnerType, expectedOwnerId) {
|
|
170
165
|
const hashedValue = (0, token_utils_1.hashToken)(token);
|
|
171
|
-
const storedLongLiveToken = await this.tokensService.
|
|
166
|
+
const storedLongLiveToken = await this.tokensService.findAuthenticationTokenByHash(hashedValue);
|
|
172
167
|
let effectiveMcpCapabilities;
|
|
173
168
|
if (!storedLongLiveToken) {
|
|
174
169
|
this.logger.warn('Long-live token not found');
|
|
@@ -197,7 +192,6 @@ let AuthGuard = class AuthGuard {
|
|
|
197
192
|
}
|
|
198
193
|
effectiveMcpCapabilities = this.mcpClientsService.getEffectiveCapabilities(client);
|
|
199
194
|
}
|
|
200
|
-
void this.tokensService.updateLastUsedAt(storedLongLiveToken.id);
|
|
201
195
|
let role = users_constants_1.UserRole.USER;
|
|
202
196
|
if (storedLongLiveToken.ownerType === auth_constants_1.TokenOwnerType.USER && storedLongLiveToken.ownerId) {
|
|
203
197
|
const user = await this.usersService.findOne(storedLongLiveToken.ownerId);
|
|
@@ -205,6 +199,7 @@ let AuthGuard = class AuthGuard {
|
|
|
205
199
|
role = user.role;
|
|
206
200
|
}
|
|
207
201
|
}
|
|
202
|
+
this.tokensService.recordUsage(storedLongLiveToken);
|
|
208
203
|
request.auth = {
|
|
209
204
|
type: 'token',
|
|
210
205
|
tokenId: storedLongLiveToken.id,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../../../../src/modules/auth/guards/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAGA,yDAAsD;AACtD,2CAQwB;AACxB,uCAAyC;AACzC,qCAAyC;AAEzC,mDAA+D;AAC/D,2DAAuG;AACvG,4EAAuE;AACvE,8EAAyE;AACzE,0FAAqF;AACrF,kGAA2F;AAC3F,sGAAiF;
|
|
1
|
+
{"version":3,"file":"auth.guard.js","sourceRoot":"","sources":["../../../../src/modules/auth/guards/auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAGA,yDAAsD;AACtD,2CAQwB;AACxB,uCAAyC;AACzC,qCAAyC;AAEzC,mDAA+D;AAC/D,2DAAuG;AACvG,4EAAuE;AACvE,8EAAyE;AACzE,0FAAqF;AACrF,kGAA2F;AAC3F,sGAAiF;AACjF,sEAAkE;AAClE,iEAAuD;AACvD,sDAAqE;AACrE,+DAA2D;AAC3D,sDAA+E;AAElE,QAAA,aAAa,GAAG,UAAU,CAAC;AAuCjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAA,wBAAe,EAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,EAAE,IAAA,uCAAS,GAAE,CAAC,CAAC;AAA9E,QAAA,MAAM,UAAwE;AAGpF,IAAM,SAAS,GAAf,MAAM,SAAS;IAGrB,YACkB,UAAsB,EACtB,SAAoB,EACpB,aAA4B,EAC5B,YAA0B,EAC1B,iBAAmC,EACnC,sBAA8C,EAC9C,eAAgC,EAChC,iBAA2C,EAE5D,YAAoC;QATnB,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,sBAAiB,GAAjB,iBAAiB,CAAkB;QACnC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAA0B;QAE3C,iBAAY,GAAZ,YAAY,CAAO;QAZpB,WAAM,GAAG,IAAA,8BAAqB,EAAC,iCAAgB,EAAE,WAAW,CAAC,CAAC;IAa5E,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,qBAAa,EAAE;YACzE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SAClB,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAEtD,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,mCAAmB,EAAE;YACpF,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SAClB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAwB,CAAC;QAG1E,MAAM,KAAK,GAAG,IAAA,0CAA4B,EAAC,OAAO,CAAC,CAAC;QAEpD,IAAI,CAAC;YACJ,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC9F,OAAO,IAAI,CAAC;YACb,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBACnB,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAC/C,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAC9D,KAAK,YAAY,8BAAqB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CACtF,CAAC;YACH,CAAC;YAED,MAAM,KAAK,CAAC;QACb,CAAC;QAED,IAAI,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACb,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAEpE,IAAI,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAC/C,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAC9D,yBAAyB,CACzB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,8BAAqB,CAAC,yBAAyB,CAAC,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAE,KAAa,EAAE,aAAsB;QAC/F,IAAI,OAAuD,CAAC;QAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7F,IAAI,CAAC;YACJ,OAAO,GAAG,aAAa;gBACtB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,wCAAwB,EAAE,CAAC;YAC/C,MAAM,IAAI,8BAAqB,CAAC,2DAA2D,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YACnB,IAAK,OAAO,CAAC,IAAuB,KAAK,+BAAc,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC7E,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,CAAC,CAAC;YAClE,CAAC;YAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,+BAAc,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;QAED,IAAK,OAAO,CAAC,IAAuB,KAAK,+BAAc,CAAC,GAAG,EAAE,CAAC;YAC7D,MAAM,IAAI,8BAAqB,CAAC,oDAAoD,CAAC,CAAC;QACvF,CAAC;QAGD,IAAK,OAAO,CAAC,IAAuB,KAAK,+BAAc,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;QAGD,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QAGD,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,OAA6B,EAC7B,KAAa,EACb,MAAc;QAEd,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,MAAM,EAAE,IAAA,uBAAS,EAAC,KAAK,CAAC,CAAC,CAAC;QAE3G,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACvD,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,IAAI,iBAAiB,CAAC,cAAc,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC5C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,8BAAqB,CAAC,cAAc,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAExE,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,oBAAoB,CACjC,OAA6B,EAC7B,KAAa,EACb,UAAkB;QAElB,MAAM,WAAW,GAAG,IAAA,uBAAS,EAAC,KAAK,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAExF,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACxD,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC7C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC7C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,WAAW,CAAC,SAAS,KAAK,+BAAc,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC5F,MAAM,IAAI,8BAAqB,CAAC,6BAA6B,CAAC,CAAC;QAChE,CAAC;QAGD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAE5C,OAAO,CAAC,IAAI,GAAG;YACd,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,WAAW,CAAC,EAAE;YACvB,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,0BAAQ,CAAC,IAAI;SACnB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;QAE1F,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,OAA6B,EAC7B,KAAa,EACb,iBAAkC,EAClC,eAAwB;QAExB,MAAM,WAAW,GAAG,IAAA,uBAAS,EAAC,KAAK,CAAC,CAAC;QACrC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAChG,IAAI,wBAAqD,CAAC;QAE1D,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC9C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,mBAAmB,CAAC,SAAS,IAAI,mBAAmB,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,iBAAiB,EAAE,CAAC;YACvB,IAAI,mBAAmB,CAAC,SAAS,KAAK,iBAAiB,IAAI,mBAAmB,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC5G,MAAM,IAAI,8BAAqB,CAAC,2CAA2C,CAAC,CAAC;YAC9E,CAAC;QACF,CAAC;aAAM,IAAI,mBAAmB,CAAC,SAAS,KAAK,+BAAc,CAAC,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,8BAAqB,CAAC,oDAAoD,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,mBAAmB,CAAC,SAAS,KAAK,+BAAc,CAAC,GAAG,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAC5D,mBAAmB,CAAC,EAAE,EACtB,mBAAmB,CAAC,OAAO,IAAI,EAAE,CACjC,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,8BAAqB,CAAC,2DAA2D,CAAC,CAAC;YAC9F,CAAC;YAED,wBAAwB,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACpF,CAAC;QAGD,IAAI,IAAI,GAAG,0BAAQ,CAAC,IAAI,CAAC;QAEzB,IAAI,mBAAmB,CAAC,SAAS,KAAK,+BAAc,CAAC,IAAI,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC;YAC1F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC1E,IAAI,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YAClB,CAAC;QACF,CAAC;QAGD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAEpD,OAAO,CAAC,IAAI,GAAG;YACd,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,mBAAmB,CAAC,EAAE;YAC/B,SAAS,EAAE,mBAAmB,CAAC,SAAS;YACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO;YACpC,IAAI,EAAE,IAAI;YACV,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,mBAAmB,CAAC,SAAS,GAAG,CAAC,CAAC;QAE5G,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;AApQY,8BAAS;oBAAT,SAAS;IADrB,IAAA,mBAAU,GAAE;IAaV,WAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;qCARO,gBAAU;QACX,gBAAS;QACL,8BAAa;QACd,4BAAY;QACP,qCAAgB;QACX,iDAAsB;QAC7B,mCAAe;QACb,uDAAwB;GAXjD,SAAS,CAoQrB"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
import { DataSource, EntitySubscriberInterface, InsertEvent, RemoveEvent, TransactionCommitEvent, TransactionRollbackEvent, UpdateEvent } from 'typeorm';
|
|
2
|
+
import { OnModuleDestroy } from '@nestjs/common';
|
|
3
|
+
import { ConfigService } from '@nestjs/config';
|
|
4
|
+
import { UserEntity } from '../../users/entities/users.entity';
|
|
5
|
+
import { LongLiveTokenEntity } from '../entities/auth.entity';
|
|
6
|
+
export type AuthenticationToken = Pick<LongLiveTokenEntity, 'id' | 'hashedToken' | 'ownerType' | 'ownerId' | 'revoked' | 'expiresAt'>;
|
|
7
|
+
export interface AuthenticationAccessToken {
|
|
8
|
+
id: string;
|
|
9
|
+
revoked: boolean;
|
|
10
|
+
expiresAt: Date | null;
|
|
11
|
+
owner: Pick<UserEntity, 'id' | 'role'> | null;
|
|
12
|
+
refreshRevoked: boolean;
|
|
13
|
+
}
|
|
14
|
+
export declare const tokenMetadataCapacity = 1000;
|
|
15
|
+
export declare class TokenMetadataService implements EntitySubscriberInterface, OnModuleDestroy {
|
|
16
|
+
private readonly dataSource;
|
|
17
|
+
private readonly enabled;
|
|
18
|
+
private readonly tokens;
|
|
19
|
+
private readonly loading;
|
|
20
|
+
private readonly dirtyTransactions;
|
|
21
|
+
private generation;
|
|
22
|
+
private stopped;
|
|
23
|
+
constructor(dataSource: DataSource, config?: ConfigService);
|
|
24
|
+
findByHash(hash: string): Promise<AuthenticationToken | null>;
|
|
25
|
+
findAccessToken(ownerId: string, hash: string): Promise<AuthenticationAccessToken | null>;
|
|
26
|
+
private findCached;
|
|
27
|
+
invalidate(): void;
|
|
28
|
+
beforeInsert(event: InsertEvent<unknown>): void;
|
|
29
|
+
afterInsert(event: InsertEvent<unknown>): void;
|
|
30
|
+
beforeRemove(event: RemoveEvent<unknown>): void;
|
|
31
|
+
afterRemove(event: RemoveEvent<unknown>): void;
|
|
32
|
+
beforeUpdate(event: UpdateEvent<unknown>): void;
|
|
33
|
+
afterUpdate(event: UpdateEvent<unknown>): void;
|
|
34
|
+
afterTransactionCommit(event: TransactionCommitEvent): void;
|
|
35
|
+
afterTransactionRollback(event: TransactionRollbackEvent): void;
|
|
36
|
+
onModuleDestroy(): void;
|
|
37
|
+
private mutation;
|
|
38
|
+
private settled;
|
|
39
|
+
private isUsageOnly;
|
|
40
|
+
private query;
|
|
41
|
+
private copy;
|
|
42
|
+
}
|
|
@@ -0,0 +1,202 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.TokenMetadataService = exports.tokenMetadataCapacity = void 0;
|
|
16
|
+
const typeorm_1 = require("typeorm");
|
|
17
|
+
const common_1 = require("@nestjs/common");
|
|
18
|
+
const config_1 = require("@nestjs/config");
|
|
19
|
+
const config_utils_1 = require("../../../common/utils/config.utils");
|
|
20
|
+
const users_entity_1 = require("../../users/entities/users.entity");
|
|
21
|
+
const auth_entity_1 = require("../entities/auth.entity");
|
|
22
|
+
exports.tokenMetadataCapacity = 1_000;
|
|
23
|
+
let TokenMetadataService = class TokenMetadataService {
|
|
24
|
+
constructor(dataSource, config = new config_1.ConfigService()) {
|
|
25
|
+
this.dataSource = dataSource;
|
|
26
|
+
this.tokens = new Map();
|
|
27
|
+
this.loading = new Map();
|
|
28
|
+
this.dirtyTransactions = new Set();
|
|
29
|
+
this.generation = 0;
|
|
30
|
+
this.stopped = false;
|
|
31
|
+
this.enabled = !(0, config_utils_1.getEnvValue)(config, 'FB_PROPERTY_VALUE_LOCKS_ENABLED', false);
|
|
32
|
+
dataSource.subscribers.push(this);
|
|
33
|
+
}
|
|
34
|
+
async findByHash(hash) {
|
|
35
|
+
const entry = await this.findCached(`long-lived:${hash}`, async () => {
|
|
36
|
+
const facts = await this.query(hash);
|
|
37
|
+
return facts ? { kind: 'long-lived', facts } : null;
|
|
38
|
+
});
|
|
39
|
+
return entry?.kind === 'long-lived' ? entry.facts : null;
|
|
40
|
+
}
|
|
41
|
+
async findAccessToken(ownerId, hash) {
|
|
42
|
+
const entry = await this.findCached(JSON.stringify(['access', ownerId, hash]), async () => {
|
|
43
|
+
const token = await this.dataSource
|
|
44
|
+
.getRepository(auth_entity_1.AccessTokenEntity)
|
|
45
|
+
.createQueryBuilder('token')
|
|
46
|
+
.leftJoinAndSelect('token.owner', 'owner')
|
|
47
|
+
.leftJoinAndSelect('token.children', 'children')
|
|
48
|
+
.select([
|
|
49
|
+
'token.id',
|
|
50
|
+
'token.revoked',
|
|
51
|
+
'token.expiresAt',
|
|
52
|
+
'owner.id',
|
|
53
|
+
'owner.role',
|
|
54
|
+
'children.id',
|
|
55
|
+
'children.revoked',
|
|
56
|
+
])
|
|
57
|
+
.where('owner.id = :ownerId', { ownerId })
|
|
58
|
+
.andWhere('token.hashedToken = :hash', { hash })
|
|
59
|
+
.getOne();
|
|
60
|
+
if (!token)
|
|
61
|
+
return null;
|
|
62
|
+
return {
|
|
63
|
+
kind: 'access',
|
|
64
|
+
facts: {
|
|
65
|
+
id: token.id,
|
|
66
|
+
revoked: token.revoked,
|
|
67
|
+
expiresAt: token.expiresAt,
|
|
68
|
+
owner: token.owner ? { id: token.owner.id, role: token.owner.role } : null,
|
|
69
|
+
refreshRevoked: token.revoked || token.refreshToken.revoked,
|
|
70
|
+
},
|
|
71
|
+
};
|
|
72
|
+
});
|
|
73
|
+
return entry?.kind === 'access' ? entry.facts : null;
|
|
74
|
+
}
|
|
75
|
+
async findCached(key, query) {
|
|
76
|
+
while (true) {
|
|
77
|
+
if (!this.enabled || this.stopped || this.dirtyTransactions.size > 0)
|
|
78
|
+
return query();
|
|
79
|
+
const cached = this.tokens.get(key);
|
|
80
|
+
if (cached) {
|
|
81
|
+
this.tokens.delete(key);
|
|
82
|
+
if (!cached.facts.expiresAt || cached.facts.expiresAt.getTime() >= Date.now())
|
|
83
|
+
this.tokens.set(key, cached);
|
|
84
|
+
return this.copy(cached);
|
|
85
|
+
}
|
|
86
|
+
const generation = this.generation;
|
|
87
|
+
let pending = this.loading.get(key);
|
|
88
|
+
if (!pending || pending.generation !== generation) {
|
|
89
|
+
if (!pending && this.loading.size >= exports.tokenMetadataCapacity)
|
|
90
|
+
return query();
|
|
91
|
+
pending = { generation, promise: query() };
|
|
92
|
+
this.loading.set(key, pending);
|
|
93
|
+
}
|
|
94
|
+
try {
|
|
95
|
+
const token = await pending.promise;
|
|
96
|
+
if (generation !== this.generation)
|
|
97
|
+
continue;
|
|
98
|
+
if (token &&
|
|
99
|
+
!token.facts.revoked &&
|
|
100
|
+
(token.kind !== 'access' || !token.facts.refreshRevoked) &&
|
|
101
|
+
(!token.facts.expiresAt || token.facts.expiresAt.getTime() >= Date.now()) &&
|
|
102
|
+
!this.stopped &&
|
|
103
|
+
this.dirtyTransactions.size === 0) {
|
|
104
|
+
if (!this.tokens.has(key) && this.tokens.size >= exports.tokenMetadataCapacity) {
|
|
105
|
+
const oldest = this.tokens.keys().next().value;
|
|
106
|
+
if (typeof oldest === 'string')
|
|
107
|
+
this.tokens.delete(oldest);
|
|
108
|
+
}
|
|
109
|
+
this.tokens.set(key, token);
|
|
110
|
+
}
|
|
111
|
+
return token ? this.copy(token) : null;
|
|
112
|
+
}
|
|
113
|
+
finally {
|
|
114
|
+
if (this.loading.get(key) === pending)
|
|
115
|
+
this.loading.delete(key);
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
}
|
|
119
|
+
invalidate() {
|
|
120
|
+
this.generation++;
|
|
121
|
+
this.tokens.clear();
|
|
122
|
+
}
|
|
123
|
+
beforeInsert(event) {
|
|
124
|
+
this.mutation(event);
|
|
125
|
+
}
|
|
126
|
+
afterInsert(event) {
|
|
127
|
+
this.mutation(event);
|
|
128
|
+
}
|
|
129
|
+
beforeRemove(event) {
|
|
130
|
+
this.mutation(event);
|
|
131
|
+
}
|
|
132
|
+
afterRemove(event) {
|
|
133
|
+
this.mutation(event);
|
|
134
|
+
}
|
|
135
|
+
beforeUpdate(event) {
|
|
136
|
+
if (!this.isUsageOnly(event))
|
|
137
|
+
this.mutation(event);
|
|
138
|
+
}
|
|
139
|
+
afterUpdate(event) {
|
|
140
|
+
if (!this.isUsageOnly(event))
|
|
141
|
+
this.mutation(event);
|
|
142
|
+
}
|
|
143
|
+
afterTransactionCommit(event) {
|
|
144
|
+
this.settled(event.queryRunner);
|
|
145
|
+
}
|
|
146
|
+
afterTransactionRollback(event) {
|
|
147
|
+
this.settled(event.queryRunner);
|
|
148
|
+
}
|
|
149
|
+
onModuleDestroy() {
|
|
150
|
+
this.stopped = true;
|
|
151
|
+
const index = this.dataSource.subscribers.indexOf(this);
|
|
152
|
+
if (index >= 0)
|
|
153
|
+
this.dataSource.subscribers.splice(index, 1);
|
|
154
|
+
this.invalidate();
|
|
155
|
+
this.dirtyTransactions.clear();
|
|
156
|
+
}
|
|
157
|
+
mutation(event) {
|
|
158
|
+
if (!event.metadata.inheritanceTree.some((type) => type === auth_entity_1.TokenEntity || type === users_entity_1.UserEntity))
|
|
159
|
+
return;
|
|
160
|
+
if (event.queryRunner.isTransactionActive)
|
|
161
|
+
this.dirtyTransactions.add(event.queryRunner);
|
|
162
|
+
this.invalidate();
|
|
163
|
+
}
|
|
164
|
+
settled(runner) {
|
|
165
|
+
if (!this.dirtyTransactions.has(runner))
|
|
166
|
+
return;
|
|
167
|
+
this.invalidate();
|
|
168
|
+
if (!runner.isTransactionActive)
|
|
169
|
+
this.dirtyTransactions.delete(runner);
|
|
170
|
+
}
|
|
171
|
+
isUsageOnly(event) {
|
|
172
|
+
const keys = Object.keys(event.entity ?? {});
|
|
173
|
+
return (event.metadata.inheritanceTree.includes(auth_entity_1.LongLiveTokenEntity) && keys.length === 1 && keys[0] === 'lastUsedAt');
|
|
174
|
+
}
|
|
175
|
+
async query(hash) {
|
|
176
|
+
const token = await this.dataSource.getRepository(auth_entity_1.LongLiveTokenEntity).findOne({
|
|
177
|
+
select: { id: true, hashedToken: true, ownerType: true, tokenOwnerId: true, revoked: true, expiresAt: true },
|
|
178
|
+
where: { hashedToken: hash },
|
|
179
|
+
});
|
|
180
|
+
return token
|
|
181
|
+
? {
|
|
182
|
+
id: token.id,
|
|
183
|
+
hashedToken: token.hashedToken,
|
|
184
|
+
ownerType: token.ownerType,
|
|
185
|
+
ownerId: token.ownerId,
|
|
186
|
+
revoked: token.revoked,
|
|
187
|
+
expiresAt: token.expiresAt,
|
|
188
|
+
}
|
|
189
|
+
: null;
|
|
190
|
+
}
|
|
191
|
+
copy(token) {
|
|
192
|
+
return structuredClone(token);
|
|
193
|
+
}
|
|
194
|
+
};
|
|
195
|
+
exports.TokenMetadataService = TokenMetadataService;
|
|
196
|
+
exports.TokenMetadataService = TokenMetadataService = __decorate([
|
|
197
|
+
(0, common_1.Injectable)(),
|
|
198
|
+
__param(1, (0, common_1.Optional)()),
|
|
199
|
+
__metadata("design:paramtypes", [typeorm_1.DataSource,
|
|
200
|
+
config_1.ConfigService])
|
|
201
|
+
], TokenMetadataService);
|
|
202
|
+
//# sourceMappingURL=token-metadata.service.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"token-metadata.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/services/token-metadata.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,qCASiB;AAEjB,2CAAuE;AACvE,2CAA+C;AAE/C,qEAAiE;AACjE,oEAA+D;AAC/D,yDAA8F;AAcjF,QAAA,qBAAqB,GAAG,KAAK,CAAC;AAUpC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAQhC,YACkB,UAAsB,EAC3B,SAAwB,IAAI,sBAAa,EAAE;QADtC,eAAU,GAAV,UAAU,CAAY;QAPvB,WAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;QACxC,YAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC1C,sBAAiB,GAAG,IAAI,GAAG,EAAe,CAAC;QACpD,eAAU,GAAG,CAAC,CAAC;QACf,YAAO,GAAG,KAAK,CAAC;QAMvB,IAAI,CAAC,OAAO,GAAG,CAAC,IAAA,0BAAW,EAAU,MAAM,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACvF,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAGD,KAAK,CAAC,UAAU,CAAC,IAAY;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,IAAY;QAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;YACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU;iBACjC,aAAa,CAAC,+BAAiB,CAAC;iBAChC,kBAAkB,CAAC,OAAO,CAAC;iBAC3B,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC;iBACzC,iBAAiB,CAAC,gBAAgB,EAAE,UAAU,CAAC;iBAC/C,MAAM,CAAC;gBACP,UAAU;gBACV,eAAe;gBACf,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,aAAa;gBACb,kBAAkB;aAClB,CAAC;iBACD,KAAK,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,CAAC;iBACzC,QAAQ,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC;iBAC/C,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO;gBACN,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE;oBACN,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;oBAE1E,cAAc,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO;iBAC3D;aACD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,KAAwC;QAC7E,OAAO,IAAI,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,KAAK,EAAE,CAAC;YACrF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,MAAM,EAAE,CAAC;gBAEZ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;oBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC5G,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACnC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAEnD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,6BAAqB;oBAAE,OAAO,KAAK,EAAE,CAAC;gBAC3E,OAAO,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;gBACpC,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC7C,IACC,KAAK;oBACL,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;oBACpB,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC;oBACxD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACzE,CAAC,IAAI,CAAC,OAAO;oBACb,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,EAChC,CAAC;oBACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,6BAAqB,EAAE,CAAC;wBACxE,MAAM,MAAM,GAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;wBACxD,IAAI,OAAO,MAAM,KAAK,QAAQ;4BAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAC5D,CAAC;oBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC7B,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxC,CAAC;oBAAS,CAAC;gBACV,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,CAAC;QACF,CAAC;IACF,CAAC;IAGD,UAAU;QACT,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,KAA2B;QACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,WAAW,CAAC,KAA2B;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,YAAY,CAAC,KAA2B;QACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,WAAW,CAAC,KAA2B;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,YAAY,CAAC,KAA2B;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,WAAW,CAAC,KAA2B;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,sBAAsB,CAAC,KAA6B;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IACD,wBAAwB,CAAC,KAA+B;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,eAAe;QACd,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,QAAQ,CAAC,KAAyE;QACzF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,yBAAW,IAAI,IAAI,KAAK,yBAAU,CAAC;YAAE,OAAO;QACxG,IAAI,KAAK,CAAC,WAAW,CAAC,mBAAmB;YAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzF,IAAI,CAAC,UAAU,EAAE,CAAC;IACnB,CAAC;IAEO,OAAO,CAAC,MAAmB;QAClC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAEO,WAAW,CAAC,KAA2B;QAE9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,CACN,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,iCAAmB,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,CAC7G,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAY;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,iCAAmB,CAAC,CAAC,OAAO,CAAC;YAC9E,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC5G,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,OAAO,KAAK;YACX,CAAC,CAAC;gBACA,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC1B;YACF,CAAC,CAAC,IAAI,CAAC;IACT,CAAC;IAEO,IAAI,CAAC,KAAkB;QAE9B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACD,CAAA;AAvLY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAWV,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCADkB,oBAAU;QACnB,sBAAa;GAVtB,oBAAoB,CAuLhC"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import { DataSource } from 'typeorm';
|
|
2
|
+
import { BeforeApplicationShutdown, OnModuleInit } from '@nestjs/common';
|
|
3
|
+
import { LongLiveTokenEntity } from '../entities/auth.entity';
|
|
4
|
+
export declare const tokenUsageFlushIntervalMs = 60000;
|
|
5
|
+
export declare const tokenUsageMaxPending = 1000;
|
|
6
|
+
type TokenIdentity = Pick<LongLiveTokenEntity, 'id' | 'hashedToken'>;
|
|
7
|
+
export declare class TokenUsageService implements OnModuleInit, BeforeApplicationShutdown {
|
|
8
|
+
private readonly dataSource;
|
|
9
|
+
private readonly logger;
|
|
10
|
+
private readonly pending;
|
|
11
|
+
private timer?;
|
|
12
|
+
private inFlight?;
|
|
13
|
+
private stopping;
|
|
14
|
+
private dropped;
|
|
15
|
+
constructor(dataSource: DataSource);
|
|
16
|
+
onModuleInit(): void;
|
|
17
|
+
record(token: TokenIdentity): void;
|
|
18
|
+
flush(): Promise<void>;
|
|
19
|
+
beforeApplicationShutdown(): Promise<void>;
|
|
20
|
+
private persist;
|
|
21
|
+
}
|
|
22
|
+
export {};
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.TokenUsageService = exports.tokenUsageMaxPending = exports.tokenUsageFlushIntervalMs = void 0;
|
|
13
|
+
const typeorm_1 = require("typeorm");
|
|
14
|
+
const common_1 = require("@nestjs/common");
|
|
15
|
+
const logger_1 = require("../../../common/logger");
|
|
16
|
+
const auth_constants_1 = require("../auth.constants");
|
|
17
|
+
const auth_entity_1 = require("../entities/auth.entity");
|
|
18
|
+
exports.tokenUsageFlushIntervalMs = 60_000;
|
|
19
|
+
exports.tokenUsageMaxPending = 1_000;
|
|
20
|
+
let TokenUsageService = class TokenUsageService {
|
|
21
|
+
constructor(dataSource) {
|
|
22
|
+
this.dataSource = dataSource;
|
|
23
|
+
this.logger = (0, logger_1.createExtensionLogger)(auth_constants_1.AUTH_MODULE_NAME, 'TokenUsageService');
|
|
24
|
+
this.pending = new Map();
|
|
25
|
+
this.stopping = false;
|
|
26
|
+
this.dropped = 0;
|
|
27
|
+
}
|
|
28
|
+
onModuleInit() {
|
|
29
|
+
this.timer = setInterval(() => void this.flush(), exports.tokenUsageFlushIntervalMs);
|
|
30
|
+
this.timer.unref();
|
|
31
|
+
}
|
|
32
|
+
record(token) {
|
|
33
|
+
if (this.stopping)
|
|
34
|
+
return;
|
|
35
|
+
const key = `${token.id}:${token.hashedToken}`;
|
|
36
|
+
const previous = this.pending.get(key);
|
|
37
|
+
if (!previous && this.pending.size >= exports.tokenUsageMaxPending) {
|
|
38
|
+
this.dropped++;
|
|
39
|
+
return;
|
|
40
|
+
}
|
|
41
|
+
this.pending.set(key, {
|
|
42
|
+
id: token.id,
|
|
43
|
+
hashedToken: token.hashedToken,
|
|
44
|
+
lastUsedAt: new Date(Math.max(Date.now(), previous?.lastUsedAt.getTime() ?? 0)),
|
|
45
|
+
});
|
|
46
|
+
}
|
|
47
|
+
flush() {
|
|
48
|
+
if (this.inFlight !== undefined)
|
|
49
|
+
return this.inFlight;
|
|
50
|
+
if (this.pending.size === 0)
|
|
51
|
+
return Promise.resolve();
|
|
52
|
+
const batch = [...this.pending.values()];
|
|
53
|
+
this.pending.clear();
|
|
54
|
+
if (this.dropped > 0) {
|
|
55
|
+
this.logger.warn(`Dropped ${this.dropped} token usage observations because the telemetry queue was full`);
|
|
56
|
+
this.dropped = 0;
|
|
57
|
+
}
|
|
58
|
+
this.inFlight = this.persist(batch).finally(() => {
|
|
59
|
+
this.inFlight = undefined;
|
|
60
|
+
});
|
|
61
|
+
return this.inFlight;
|
|
62
|
+
}
|
|
63
|
+
async beforeApplicationShutdown() {
|
|
64
|
+
this.stopping = true;
|
|
65
|
+
if (this.timer)
|
|
66
|
+
clearInterval(this.timer);
|
|
67
|
+
await this.flush();
|
|
68
|
+
await this.flush();
|
|
69
|
+
}
|
|
70
|
+
async persist(batch) {
|
|
71
|
+
let failures = 0;
|
|
72
|
+
for (const { id, hashedToken, lastUsedAt } of batch) {
|
|
73
|
+
try {
|
|
74
|
+
const identity = { id, hashedToken, revoked: false };
|
|
75
|
+
await this.dataSource.getRepository(auth_entity_1.LongLiveTokenEntity).update([
|
|
76
|
+
{ ...identity, lastUsedAt: (0, typeorm_1.IsNull)() },
|
|
77
|
+
{ ...identity, lastUsedAt: (0, typeorm_1.LessThan)(lastUsedAt) },
|
|
78
|
+
], { lastUsedAt });
|
|
79
|
+
}
|
|
80
|
+
catch {
|
|
81
|
+
failures++;
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
if (failures > 0)
|
|
85
|
+
this.logger.warn(`Failed to persist ${failures} token usage observations`);
|
|
86
|
+
}
|
|
87
|
+
};
|
|
88
|
+
exports.TokenUsageService = TokenUsageService;
|
|
89
|
+
exports.TokenUsageService = TokenUsageService = __decorate([
|
|
90
|
+
(0, common_1.Injectable)(),
|
|
91
|
+
__metadata("design:paramtypes", [typeorm_1.DataSource])
|
|
92
|
+
], TokenUsageService);
|
|
93
|
+
//# sourceMappingURL=token-usage.service.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"token-usage.service.js","sourceRoot":"","sources":["../../../../src/modules/auth/services/token-usage.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAuD;AAEvD,2CAAqF;AAErF,mDAA+D;AAC/D,sDAAqD;AACrD,yDAA8D;AAEjD,QAAA,yBAAyB,GAAG,MAAM,CAAC;AACnC,QAAA,oBAAoB,GAAG,KAAK,CAAC;AAOnC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAQ7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;QAPlC,WAAM,GAAG,IAAA,8BAAqB,EAAC,iCAAgB,EAAE,mBAAmB,CAAC,CAAC;QACtE,YAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;QAGvD,aAAQ,GAAG,KAAK,CAAC;QACjB,YAAO,GAAG,CAAC,CAAC;IAEkC,CAAC;IAEvD,YAAY;QACX,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,iCAAyB,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAGD,MAAM,CAAC,KAAoB;QAC1B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAE1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAGvC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,4BAAoB,EAAE,CAAC;YAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACrB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;SAC/E,CAAC,CAAC;IACJ,CAAC;IAGD,KAAK;QACJ,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAEtD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,gEAAgE,CAAC,CAAC;YAC1G,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAClB,CAAC;QAGD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAChD,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAGD,KAAK,CAAC,yBAAyB;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEnB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,KAAyB;QAC9C,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,KAAK,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC;YACrD,IAAI,CAAC;gBAGJ,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACrD,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,iCAAmB,CAAC,CAAC,MAAM,CAC9D;oBACC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE;oBACrC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,IAAA,kBAAQ,EAAC,UAAU,CAAC,EAAE;iBACjD,EACD,EAAE,UAAU,EAAE,CACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAGR,QAAQ,EAAE,CAAC;YACZ,CAAC;QACF,CAAC;QAED,IAAI,QAAQ,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,QAAQ,2BAA2B,CAAC,CAAC;IAC9F,CAAC;CACD,CAAA;AAzFY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAS6B,oBAAU;GARvC,iBAAiB,CAyF7B"}
|
|
@@ -3,13 +3,17 @@ import { TokenOwnerType } from '../auth.constants';
|
|
|
3
3
|
import { CreateTokenDto } from '../dto/create-token.dto';
|
|
4
4
|
import { UpdateTokenDto } from '../dto/update-token.dto';
|
|
5
5
|
import { AccessTokenEntity, LongLiveTokenEntity, TokenEntity } from '../entities/auth.entity';
|
|
6
|
+
import { AuthenticationAccessToken, AuthenticationToken, TokenMetadataService } from './token-metadata.service';
|
|
7
|
+
import { TokenUsageService } from './token-usage.service';
|
|
6
8
|
import { TokensTypeMapperService } from './tokens-type-mapper.service';
|
|
7
9
|
export declare class TokensService {
|
|
8
10
|
private readonly repository;
|
|
9
11
|
private readonly tokensMapperService;
|
|
10
12
|
private readonly dataSource;
|
|
13
|
+
private readonly tokenUsageService;
|
|
14
|
+
private readonly tokenMetadata;
|
|
11
15
|
private readonly logger;
|
|
12
|
-
constructor(repository: Repository<TokenEntity>, tokensMapperService: TokensTypeMapperService, dataSource: DataSource);
|
|
16
|
+
constructor(repository: Repository<TokenEntity>, tokensMapperService: TokensTypeMapperService, dataSource: DataSource, tokenUsageService: TokenUsageService, tokenMetadata: TokenMetadataService);
|
|
13
17
|
findAll<TToken extends TokenEntity>(type?: new (...args: any[]) => TToken): Promise<TToken[]>;
|
|
14
18
|
findAllByOwner<TToken extends TokenEntity>(owner: string, type?: new (...args: any[]) => TToken): Promise<TToken[]>;
|
|
15
19
|
findAccessTokenByOwnerAndHash(ownerId: string, hashedToken: string): Promise<AccessTokenEntity | null>;
|
|
@@ -18,8 +22,10 @@ export declare class TokensService {
|
|
|
18
22
|
revokeByOwnerId(ownerId: string, ownerType: TokenOwnerType): Promise<void>;
|
|
19
23
|
revokeUserCredentials(userId: string): Promise<void>;
|
|
20
24
|
revoke(id: string, manager?: EntityManager): Promise<void>;
|
|
25
|
+
findAuthenticationAccessToken(ownerId: string, hashedToken: string): Promise<AuthenticationAccessToken | null>;
|
|
26
|
+
findAuthenticationTokenByHash(hashedToken: string): Promise<AuthenticationToken | null>;
|
|
21
27
|
findOneByHashedToken(hashedToken: string): Promise<LongLiveTokenEntity | null>;
|
|
22
|
-
|
|
28
|
+
recordUsage(token: Pick<LongLiveTokenEntity, 'id' | 'hashedToken'>): void;
|
|
23
29
|
findOne<TToken extends TokenEntity>(id: string, type?: new (...args: any[]) => TToken): Promise<TToken | null>;
|
|
24
30
|
findByHashedToken<TToken extends TokenEntity>(token: string, type?: new (...args: any[]) => TToken): Promise<TToken | null>;
|
|
25
31
|
create<TToken extends TokenEntity, TCreateDTO extends CreateTokenDto>(createDto: TCreateDTO): Promise<TToken>;
|
|
@@ -28,12 +28,16 @@ const auth_constants_1 = require("../auth.constants");
|
|
|
28
28
|
const auth_exceptions_1 = require("../auth.exceptions");
|
|
29
29
|
const auth_entity_1 = require("../entities/auth.entity");
|
|
30
30
|
const token_utils_1 = require("../utils/token.utils");
|
|
31
|
+
const token_metadata_service_1 = require("./token-metadata.service");
|
|
32
|
+
const token_usage_service_1 = require("./token-usage.service");
|
|
31
33
|
const tokens_type_mapper_service_1 = require("./tokens-type-mapper.service");
|
|
32
34
|
let TokensService = class TokensService {
|
|
33
|
-
constructor(repository, tokensMapperService, dataSource) {
|
|
35
|
+
constructor(repository, tokensMapperService, dataSource, tokenUsageService, tokenMetadata) {
|
|
34
36
|
this.repository = repository;
|
|
35
37
|
this.tokensMapperService = tokensMapperService;
|
|
36
38
|
this.dataSource = dataSource;
|
|
39
|
+
this.tokenUsageService = tokenUsageService;
|
|
40
|
+
this.tokenMetadata = tokenMetadata;
|
|
37
41
|
this.logger = (0, logger_1.createExtensionLogger)(auth_constants_1.AUTH_MODULE_NAME, 'TokensService');
|
|
38
42
|
}
|
|
39
43
|
async findAll(type) {
|
|
@@ -134,6 +138,12 @@ let TokensService = class TokensService {
|
|
|
134
138
|
throw new auth_exceptions_1.AuthNotFoundException('Requested token does not exist');
|
|
135
139
|
}
|
|
136
140
|
}
|
|
141
|
+
findAuthenticationAccessToken(ownerId, hashedToken) {
|
|
142
|
+
return this.tokenMetadata.findAccessToken(ownerId, hashedToken);
|
|
143
|
+
}
|
|
144
|
+
findAuthenticationTokenByHash(hashedToken) {
|
|
145
|
+
return this.tokenMetadata.findByHash(hashedToken);
|
|
146
|
+
}
|
|
137
147
|
async findOneByHashedToken(hashedToken) {
|
|
138
148
|
this.logger.debug('Finding long-live token by hashed value');
|
|
139
149
|
const repository = this.dataSource.getRepository(auth_entity_1.LongLiveTokenEntity);
|
|
@@ -142,14 +152,8 @@ let TokensService = class TokensService {
|
|
|
142
152
|
});
|
|
143
153
|
return token ?? null;
|
|
144
154
|
}
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
const repository = this.dataSource.getRepository(auth_entity_1.LongLiveTokenEntity);
|
|
148
|
-
await repository.update(tokenId, { lastUsedAt: new Date() });
|
|
149
|
-
}
|
|
150
|
-
catch (error) {
|
|
151
|
-
this.logger.debug(`Failed to update lastUsedAt for token ${tokenId}: ${error.message}`);
|
|
152
|
-
}
|
|
155
|
+
recordUsage(token) {
|
|
156
|
+
this.tokenUsageService.record(token);
|
|
153
157
|
}
|
|
154
158
|
async findOne(id, type) {
|
|
155
159
|
return this.findByField('id', id, type);
|
|
@@ -326,6 +330,8 @@ exports.TokensService = TokensService = __decorate([
|
|
|
326
330
|
__param(0, (0, typeorm_2.InjectRepository)(auth_entity_1.TokenEntity)),
|
|
327
331
|
__metadata("design:paramtypes", [typeorm_1.Repository,
|
|
328
332
|
tokens_type_mapper_service_1.TokensTypeMapperService,
|
|
329
|
-
typeorm_1.DataSource
|
|
333
|
+
typeorm_1.DataSource,
|
|
334
|
+
token_usage_service_1.TokenUsageService,
|
|
335
|
+
token_metadata_service_1.TokenMetadataService])
|
|
330
336
|
], TokensService);
|
|
331
337
|
//# sourceMappingURL=tokens.service.js.map
|