Ryan/drop
1
0
Fork 0
mirror of https://github.com/Drop-OSS/drop.git synced 2025-11-20 11:41:14 +10:00
Code Issues Packages Projects Releases Wiki Activity

feat: allow client-based web tokens

Browse Source
This commit is contained in:
DecDuck
2025-04-08 16:16:40 +10:00
parent 043ef6dcd2
commit 42349ad4e1
8 changed files with 59 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
server/internal/acls/index.ts
View File

@ -33,7 +33,7 @@ export const userACLs = [
] as const;
const userACLPrefix = "user:";
type UserACL = Array<(typeof userACLs)[number]>;
export type UserACL = Array<(typeof userACLs)[number]>;
export const systemACLs = [
"auth:read",
@ -69,7 +69,7 @@ export const systemACLs = [
] as const;
const systemACLPrefix = "system:";
type SystemACL = Array<(typeof systemACLs)[number]>;
export type SystemACL = Array<(typeof systemACLs)[number]>;
class ACLManager {
private getAuthorizationToken(request: MinimumRequestObject) {
@ -90,16 +90,25 @@ class ACLManager {
const authorizationToken = this.getAuthorizationToken(request);
if (!authorizationToken) return undefined;
const token = await prisma.aPIToken.findUnique({
where: { token: authorizationToken },
where: {
token: authorizationToken,
mode: { in: [APITokenMode.User, APITokenMode.Client] },
},
});
if (!token) return undefined;
if (token.mode != APITokenMode.User || !token.userId) return undefined; // If it's a system token
if (!token.userId)
throw new Error(
"No userId on user or client token - is something broken?"
);
for (const acl of acls) {
const tokenACLIndex = token.acls.findIndex((e) => e == acl);
if (tokenACLIndex != -1) return token.userId;
}
console.log(token);
console.log(acls);
return undefined;
}