rockfic/next
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(api): remove auth cookie checks

Browse Source 
just get the authorization header
This commit is contained in:
✑ ☙◦❀ The Tablet ☯ GamerGirlandCo ❀◦❧ 2024-03-21 18:34:46 -04:00
parent ec13656660
commit 4139f6fd58
Signed by: tablet
GPG Key ID: 924A5F6AF051E87C
2 changed files with 20 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server/api/auth/session.get.ts
View File

@ -1,6 +1,6 @@
export default eventHandler((event) => { export default eventHandler((event) => {
let ahead = (getHeaders(event).authorization || getCookie(event, "auth:token") || "")?.replace("Bearer ", ""); let ahead = (getHeaders(event).authorization || "")?.replace("Bearer ", "");
if (event.context.currentUser) { if (event.context.currentUser && ahead) {
return { return {
token: ahead, token: ahead,
user: event.context.currentUser, user: event.context.currentUser,

29
server/middleware/05.currentUser.ts
View File

@ -2,19 +2,26 @@ import jwt from "jsonwebtoken";
import { log } from "@server/logger"; import { log } from "@server/logger";
import { messages } from "@server/constants"; import { messages } from "@server/constants";
import { User } from "@models/user"; import { User } from "@models/user";
import { AccessToken } from "@models/oauth";
import { IJwt } from "@server/types/authstuff";
export default defineEventHandler(async (event) => { export default defineEventHandler(async (event) => {
let ahead = (getHeaders(event).authorization || getCookie(event, "auth:token") || "")?.replace("Bearer ", ""); let ahead = (getHeaders(event).authorization || "")?.replace("Bearer ", "");
// console.log("in here fucknuts", ahead);
// log.debug(`'${ahead}'`, { label: "idk" });
if (ahead) { if (ahead) {
let toktok = jwt.verify( let toktok: jwt.JwtPayload;
ahead, try {
// ahead.replace("Bearer ", ""), toktok = jwt.verify(ahead, useRuntimeConfig().jwt) as IJwt;
useRuntimeConfig().jwt, let user = await User.findById(toktok.id as number).exec();
) as jwt.JwtPayload; if (user && toktok) event.context.currentUser = user;
let user = await User.findById(toktok.id as number).exec(); } catch (e) {
if (user && toktok) event.context.currentUser = user; const t = await AccessToken.findOne({ token: ahead });
// setCookie(event, "auth:token", ahead) if (!t)
throw createError({
statusCode: 401,
message: messages[401],
});
let user = await User.findById(t.userID);
if (user) event.context.currentUser = user;
}
} }
}); });