# all files / red/api/auth/ tokens.js

100% Statements 50/50
88.89% Branches 16/18
100% Functions 13/13
100% Lines 49/49

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    89
    90
    91
    92
    93
    94
    95
    96
    97
    98
    99
    100
    101
    102
    103
    104
    105
    106
    107
    108
    109
    110
    111
    112
    113

    1×

    1×
    1×
    1×
    1×
    128×

    1×

    1×

    1×

    1×

    1×

    1×
    6×
    6×
    6×
    4×
    4×
    4×
    1×
    1×

    6×
    1×

    5×

    1×
    6×
    5×
    5×
    5×

    6×

    1×

    6×
    6×

    6×
    6×

    4×
    4×
    3×
    1×

    3×

    1×
    1×

    1×

    1×

    1×
    1×
    1×

    1×
    1×
    1×

     /**
     * Copyright JS Foundation and other contributors, http://js.foundation
     *
     * Licensed under the Apache License, Version 2.0 (the "License");
     * you may not use this file except in compliance with the License.
     * You may obtain a copy of the License at
     *
     * http://www.apache.org/licenses/LICENSE-2.0
     *
     * Unless required by applicable law or agreed to in writing, software
     * distributed under the License is distributed on an "AS IS" BASIS,
     * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     * See the License for the specific language governing permissions and
     * limitations under the License.
     **/

    var when = require("when");

    function generateToken(length) {
        var c = "ABCDEFGHIJKLMNOPQRSTUZWXYZabcdefghijklmnopqrstuvwxyz1234567890";
        var token = [];
        for (var i=0;i<length;i++) {
            token.push(c[Math.floor(Math.random()*c.length)]);
        }
        return token.join("");
    }

    var storage;

    var sessionExpiryTime

    var sessions = {};

    var loadedSessions = null;

    function expireSessions() {
        var now = Date.now();
        var modified = false;
        for (var t in sessions) {
            Eif (sessions.hasOwnProperty(t)) {
                var session = sessions[t];
                if (!session.hasOwnProperty("expires") || session.expires < now) {
                    delete sessions[t];
                    modified = true;
                }
            }
        }
        if (modified) {
            return storage.saveSessions(sessions);
        } else {
            return when.resolve();
        }
    }
    function loadSessions() {
        if (loadedSessions === null) {
            loadedSessions = storage.getSessions().then(function(_sessions) {
                 sessions = _sessions||{};
                 return expireSessions();
            });
        }
        return loadedSessions;
    }

    module.exports = {
        init: function(adminAuthSettings, _storage) {
            storage = _storage;
            sessionExpiryTime = adminAuthSettings.sessionExpiryTime || 604800; // 1 week in seconds
            // At this point, storage will not have been initialised, so defer loading
            // the sessions until there's a request for them.
            loadedSessions = null;
            return when.resolve();
        },
        get: function(token) {
            return loadSessions().then(function() {
                if (sessions[token]) {
                    if (sessions[token].expires < Date.now()) {
                        return expireSessions().then(function() { return null });
                    }
                }
                return when.resolve(sessions[token]);
            });
        },
        create: function(user,client,scope) {
            return loadSessions().then(function() {
                var accessToken = generateToken(128);

                var accessTokenExpiresAt = Date.now() + (sessionExpiryTime*1000);

                var session = {
                    user:user,
                    client:client,
                    scope:scope,
                    accessToken: accessToken,
                    expires: accessTokenExpiresAt
                };
                sessions[accessToken] = session;
                return storage.saveSessions(sessions).then(function() {
                    return {
                        accessToken: accessToken,
                        expires_in: sessionExpiryTime
                    }
                });
            });
        },
        revoke: function(token) {
            return loadSessions().then(function() {
                delete sessions[token];
                return storage.saveSessions(sessions);
            });
        }
    }