full-power-check

This commit is contained in:
Untone 2024-03-04 18:43:44 +03:00
parent bb1e14a4a4
commit 5aeec46fb9

View File

@ -1,14 +1,18 @@
import { Authorizer } from '@authorizerdev/authorizer-js'; import { ApiResponse, Authorizer, User } from '@authorizerdev/authorizer-js';
import { Server } from '@hocuspocus/server'; import { Server } from '@hocuspocus/server'
const port = process.env.PORT || 4000
const authorizer = new Authorizer({ const authorizer = new Authorizer({
clientID: process.env.AUTHORIZER_CLIENT_ID || '', clientID: process.env.AUTHORIZER_CLIENT_ID || '',
authorizerURL: process.env.AUTHORIZER_URL || 'https://auth.discours.io', authorizerURL: process.env.AUTHORIZER_URL || 'https://auth.discours.io',
redirectURL: process.env.REDIRECT_URL || 'https://testing.discours.io', redirectURL: process.env.REDIRECT_URL || 'https://testing.discours.io',
}); });
console.info(authorizer)
const server = Server.configure({ const server = Server.configure({
port: process.env.PORT || 4000, port,
onConnect({ connection }) { onConnect({ connection }) {
connection.requiresAuthentication = true; connection.requiresAuthentication = true;
}, },
@ -18,6 +22,10 @@ const server = Server.configure({
return null; return null;
} }
const parsedUrl = url.parse(data.socket.url, true);
const shout_id = parsedUrl.query.shout_id;
console.debug(`parsed socket url shout_id extracted: ${shout_id}`);
const params = { const params = {
token_type: 'access_token', token_type: 'access_token',
token: data.requestHeaders['authorization'] || '', token: data.requestHeaders['authorization'] || '',
@ -28,19 +36,62 @@ const server = Server.configure({
return null; return null;
} }
return authorizer.validateJWTToken(params) authorizer.validateJWTToken(params)
.then(response => { .then(response => {
if (!response?.data?.is_valid) { if (!response?.data?.is_valid) {
console.error('Invalid authorization token'); console.error('Invalid authorization token');
return null; return null;
} }
const { sub: user, allowed_roles: roles } = response.data.claims; const { sub: user_id, allowed_roles: roles } = response.data.claims
console.debug(`user_id: ${user} roles: ${roles}`); console.debug(`user_id: ${user_id} roles: ${roles}`)
if (roles.includes('editor')) {
return { return {
id: user, id: user_id,
roles: Array.isArray(roles) ? roles : [roles], roles: Array.isArray(roles) ? roles : roles.split(',')
}
}
authorizer.getProfile(params).then((r) => {
console.debug(r)
const { profile: author } = r.data.app_data
const author_id = author.get('id')
if(author_id) {
const query = `
query {
get_shout(shout_id: $shout_id) {
id
slug
authors
}
}
`;
fetch('https://core.discours.io/graphql', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ query, variables: { shout_id } }),
})
.then(res => res.json())
.then(data => {
console.debug(data)
const { authors } = data.get_shout;
if (authors.includes(author_id)) {
return {
id: user_id,
author: author_id,
roles: Array.isArray(roles) ? roles : roles.split(','),
}; };
}
return null;
})
.catch(e => {
console.error('Error fetching shout data:', e.message);
console.error(e.stack);
return null;
});
}
})
}) })
.catch(e => { .catch(e => {
console.error('Error validating authorization token:', e.message); console.error('Error validating authorization token:', e.message);
@ -50,4 +101,4 @@ const server = Server.configure({
}, },
}); });
server.listen(); server.listen().then(r => console.info(r));