This repository has been archived on 2022-11-26. You can view files and clone it, but cannot push or open issues or pull requests.
IcyNet.eu/server/api/oauth2/controller/tokens/authorizationCode.js

77 lines
2.3 KiB
JavaScript
Raw Normal View History

import { InvalidRequest, ServerError, InvalidGrant } from '../../error'
2017-08-23 20:13:45 +00:00
export async function authorizationCode (oauth2, client, providedCode) {
2020-05-28 18:30:21 +00:00
const respObj = {
2017-08-23 20:13:45 +00:00
token_type: 'bearer'
}
let code = null
if (!providedCode) {
throw new InvalidRequest('code is mandatory for authorization_code grant type')
}
2017-08-23 20:13:45 +00:00
try {
code = await oauth2.model.code.fetchByCode(providedCode)
} catch (err) {
console.error(err)
throw new ServerError('Failed to call code.fetchByCode function')
2017-08-23 20:13:45 +00:00
}
if (code) {
if (oauth2.model.code.getClientId(code) !== oauth2.model.client.getId(client)) {
throw new InvalidGrant('Code was issued by another client')
2017-08-23 20:13:45 +00:00
}
if (!oauth2.model.code.checkTTL(code)) {
throw new InvalidGrant('Code has already expired')
2017-08-23 20:13:45 +00:00
}
} else {
throw new InvalidGrant('Code not found')
2017-08-23 20:13:45 +00:00
}
console.debug('Code fetched ', code)
try {
2020-06-15 16:47:03 +00:00
await oauth2.model.refreshToken.removeByUserIdClientId(oauth2.model.code.getUserId(code),
oauth2.model.code.getClientId(code))
2017-08-23 20:13:45 +00:00
} catch (err) {
console.error(err)
throw new ServerError('Failed to call refreshToken.removeByUserIdClientId function')
2017-08-23 20:13:45 +00:00
}
console.debug('Refresh token removed')
if (!oauth2.model.client.checkGrantType(client, 'refresh_token')) {
console.debug('Client does not allow grant type refresh_token, skip creation')
} else {
try {
2020-06-15 16:47:03 +00:00
respObj.refresh_token = await oauth2.model.refreshToken.create(oauth2.model.code.getUserId(code),
oauth2.model.code.getClientId(code), oauth2.model.code.getScope(code))
2017-08-23 20:13:45 +00:00
} catch (err) {
console.error(err)
throw new ServerError('Failed to call refreshToken.create function')
2017-08-23 20:13:45 +00:00
}
}
try {
2020-06-15 16:47:03 +00:00
respObj.access_token = await oauth2.model.accessToken.create(oauth2.model.code.getUserId(code),
oauth2.model.code.getClientId(code), oauth2.model.code.getScope(code), oauth2.model.accessToken.ttl)
2017-08-23 20:13:45 +00:00
} catch (err) {
console.error(err)
throw new ServerError('Failed to call accessToken.create function')
2017-08-23 20:13:45 +00:00
}
respObj.expires_in = oauth2.model.accessToken.ttl
console.debug('Access token saved: ', respObj.access_token)
try {
await oauth2.model.code.removeByCode(providedCode)
} catch (err) {
console.error(err)
throw new ServerError('Failed to call code.removeByCode function')
2017-08-23 20:13:45 +00:00
}
return respObj
}