@stacksjs/auth 0.68.1 → 0.69.0

package/dist/authentication.d.ts

@@ -5,6 +5,76 @@ declare interface Credentials {
 declare type AuthToken = `${number}:${number}:${string}`
 
 const authConfig = { username: 'email', password: 'password' }
-export declare function attempt(credentials: Credentials): Promise<boolean>;
-export declare function team(): Promise<TeamModel | undefined>;
-export declare function authToken(): Promise<AuthToken | undefined>;
+
+let authUser: any
+
+export async function attempt(credentials: Credentials): Promise<boolean> {
+  let hashCheck = false
+
+  const user = await User.where(authConfig.username, credentials[authConfig.username]).first()
+  const authPass = credentials[authConfig.password]
+
+  if (typeof authPass === 'string' && user?.password)
+    hashCheck = await verifyHash(authPass, user?.password, 'bcrypt')
+
+  if (hashCheck) {
+    if (user) {
+      authUser = user
+
+      return true
+    }
+  }
+
+  return false
+}
+
+export async function team(): Promise<TeamModel | undefined> {
+  if (authUser) {
+    const teams = await authUser.userTeams()
+
+    return teams[0].team
+  }
+
+  const bearerToken = request.bearerToken()
+
+  if (!bearerToken) {
+    return undefined
+  }
+
+  const parts = bearerToken.split(':')
+
+  if (parts.length !== 3)
+    throw new HttpError(401, 'Invalid bearer token format')
+
+  const tokenId = Number(parts[0])
+  const teamId = parts[1]
+  const plainString = parts[2]
+
+  const accessToken = await AccessToken.where('id', Number(tokenId)).where('token', plainString).first()
+
+  if (Number(teamId) !== Number(accessToken?.team_id)) {
+    return undefined
+  }
+
+  const team = await Team.find(Number(accessToken?.team_id))
+
+  return team
+}
+
+export async function authToken(): Promise<AuthToken | undefined> {
+  if (authUser) {
+    const teams = await authUser.userTeams()
+
+    const team = teams[0]
+
+    const accessTokens = await team.teamAccessTokens()
+    const accessToken = accessTokens[0]
+
+    const tokenId = accessToken?.id
+
+    if (!accessToken)
+      throw new HttpError(500, 'Error generating token!')
+
+    return `${tokenId}:${team.id}:${accessToken.token}`
+  }
+}