@vario-software/vario-app-framework-backend 2025.37.0

package/utils/promiseSingletonMap.js

@@ -0,0 +1,30 @@
+class PromiseSingletonMap
+{
+  constructor()
+  {
+    this.promiseMap = new Map();
+  }
+
+  /**
+   * Executes the function only once per key.
+   * On parallel access, the existing promise is returned.
+   */
+  run(key, fn)
+  {
+    if (this.promiseMap.has(key))
+    {
+      return this.promiseMap.get(key);
+    }
+
+    const promise = fn().finally(() =>
+    {
+      this.promiseMap.delete(key);
+    });
+
+    this.promiseMap.set(key, promise);
+
+    return promise;
+  }
+}
+
+module.exports = PromiseSingletonMap;

package/utils/token.js

@@ -0,0 +1,83 @@
+const { jwtVerify, decodeJwt } = require('jose');
+const { getApp } = require('#backend/utils/context.js');
+
+function validateOfflineToken(offlineToken)
+{
+  return new Promise((resolve, reject) =>
+  {
+    if (!offlineToken)
+    {
+      console.log('No token to read');
+      reject();
+      return;
+    }
+
+    const app = getApp();
+
+    try
+    {
+      const payload = decodeJwt(offlineToken);
+
+      const { azp } = payload;
+      const { clientId } = app.client;
+
+      if (!azp || azp !== clientId)
+      {
+        reject();
+        return;
+      }
+
+      resolve(payload);
+    }
+    catch (error)
+    {
+      console.log('cannot decodeJwT');
+    }
+  });
+}
+
+function validateAppToken(appToken)
+{
+  return new Promise((resolve, reject) =>
+  {
+    if (!appToken)
+    {
+      reject();
+      return;
+    }
+
+    const app = getApp();
+
+    const { clientSecret, appIdentifier } = app.client;
+
+    const key = new TextEncoder().encode(clientSecret);
+
+    jwtVerify(appToken, key)
+      .then(({ payload }) =>
+      {
+        const { aud, exp } = payload;
+
+        if (!aud || aud !== appIdentifier)
+        {
+          console.log('First cond', !aud, aud !== appIdentifier);
+          reject();
+          return;
+        }
+
+        if (!exp || exp < (Date.now() / 1000))
+        {
+          console.log('Second cond', !exp, exp < (Date.now() / 1000));
+          reject();
+          return;
+        }
+
+        resolve(payload);
+      })
+      .catch(reject);
+  });
+}
+
+module.exports = {
+  validateOfflineToken,
+  validateAppToken,
+};