@rpcbase/server 0.198.0 → 0.199.0

package/get_object_id.js

@@ -0,0 +1,32 @@
+/* @flow */
+const assert = require("assert")
+const crypto = require("crypto")
+
+const isHexadecimal = require("validator/lib/isHexadecimal")
+
+
+const {CUSTOMER_PREFIX} = process.env
+
+// TODO: WARNING: DANGER: this code is duplicated in the client
+// TODO: move it to iso
+
+// Validation
+// is defined
+assert(CUSTOMER_PREFIX, "expected CUSTOMER_PREFIX to be defined")
+// is hexadecimal
+assert(isHexadecimal(CUSTOMER_PREFIX), "expected CUSTOMER_PREFIX to be a hexadecimal")
+// is 4 bytes
+assert(CUSTOMER_PREFIX.length === 8, "CUSTOMER_PREFIX must be exactly bytes long ie: 8 hex chars")
+// is lower than
+const max_val = parseInt("6387427d", 16)
+const customer_prefix_int = parseInt(CUSTOMER_PREFIX, 16)
+assert(max_val - customer_prefix_int > 0, "CUSTOMER_PREFIX must be lower than 6387427d")
+
+// generates a 12 bytes mongodb object id using the org id prefix or custom customer id
+const get_object_id = () => {
+  const random_bytes = crypto.randomBytes(8)
+  const obj_id = `${CUSTOMER_PREFIX}${random_bytes.toString("hex")}`
+  return obj_id
+}
+
+module.exports = get_object_id

package/index.js

@@ -12,3 +12,5 @@ module.exports = {
   client_router,
   rpc_router,
 }
+
+console.log("ICI SERRRRRRR", process.env.CUSTOMER_PREFIX)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.198.0",
+  "version": "0.199.0",
   "license": "SSPL-1.0",
   "main": "./index.js",
   "bin": {

package/src/auth/reset_password.js

@@ -10,6 +10,7 @@ const get_random_str = require("@rpcbase/std/crypto/get_random_str")
 
 const mailer = require("../../mailer")
 const mongoose = require("../../mongoose")
+const get_object_id = require("../../get_object_id")
 const ResetPasswordToken = require("../models/ResetPasswordToken")
 
 const log = debug("rb:auth:reset_password")
@@ -40,6 +41,7 @@ const reset_password = async({email}, ctx) => {
   const token_hash = await hash_password(token)
 
   const reset_token = new ResetPasswordToken({
+    _id: get_object_id(),
     user_id: user._id,
     token_hash,
   })

package/src/auth/sign_up.js

@@ -1,6 +1,8 @@
 /* @flow */
 const {hash_password} = require("@rpcbase/std/crypto/hash")
 
+const get_object_id = require("../../get_object_id")
+
 const mongoose = require("../../mongoose")
 
 const sign_up = async({email, password}, ctx) => {
@@ -40,6 +42,7 @@ const sign_up = async({email, password}, ctx) => {
   const hash = await hash_password(password)
 
   const user = new User({
+    _id: get_object_id(),
     email,
     password_hash: hash
   })