jayjennings
3f6dff5f24
- Add permissions logic for status options in corrective actions. - Create tests for permissions functionality. - Implement queries for user authentication and actions management. - Develop Actions page to display and manage corrective actions. - Create authentication pages for login, setup, and password reset. - Add IncidentDetail page to view incident details and associated actions. - Implement Settings page for user management and password changes.
30 lines
1.3 KiB
TypeScript
30 lines
1.3 KiB
TypeScript
import { and, eq, gt, isNull } from 'drizzle-orm'
|
|
import { createHash, randomBytes } from 'node:crypto'
|
|
import type { Db } from '../db/client.ts'
|
|
import { authTokens, users } from '../db/schema.ts'
|
|
|
|
export type TokenPurpose = 'magic_link' | 'password_reset'
|
|
|
|
const hash = (token: string) => createHash('sha256').update(token).digest('hex')
|
|
|
|
export async function createAuthToken(db: Db, userId: string, purpose: TokenPurpose, ttlMs: number): Promise<string> {
|
|
const token = randomBytes(32).toString('base64url')
|
|
await db.insert(authTokens).values({ id: hash(token), userId, purpose, expiresAt: new Date(Date.now() + ttlMs) })
|
|
return token
|
|
}
|
|
|
|
/** Marks the token used and returns its (active) user's id, or null if invalid, expired or already used. */
|
|
export async function consumeAuthToken(db: Db, token: string, purpose: TokenPurpose): Promise<string | null> {
|
|
const [row] = await db
|
|
.update(authTokens)
|
|
.set({ usedAt: new Date() })
|
|
.where(and(eq(authTokens.id, hash(token)), eq(authTokens.purpose, purpose), isNull(authTokens.usedAt), gt(authTokens.expiresAt, new Date())))
|
|
.returning({ userId: authTokens.userId })
|
|
if (!row) return null
|
|
const [user] = await db
|
|
.select({ id: users.id })
|
|
.from(users)
|
|
.where(and(eq(users.id, row.userId), eq(users.active, true)))
|
|
return user?.id ?? null
|
|
}
|