discours.io/crdt-server
5
0
Fork 0
Code Pull Requests Actions Activity

full-power-check

Browse Source
This commit is contained in:
Untone 2024-03-04 18:43:44 +03:00
parent bb1e14a4a4
commit 5aeec46fb9
1 changed files with 95 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
index.mjs
View File

@ -1,14 +1,18 @@
import { Authorizer } from '@authorizerdev/authorizer-js';
import { Server } from '@hocuspocus/server';
import { ApiResponse, Authorizer, User } from '@authorizerdev/authorizer-js';
import { Server } from '@hocuspocus/server'
const port = process.env.PORT || 4000
const authorizer = new Authorizer({
clientID: process.env.AUTHORIZER_CLIENT_ID || '',
authorizerURL: process.env.AUTHORIZER_URL || 'https://auth.discours.io',
redirectURL: process.env.REDIRECT_URL || 'https://testing.discours.io',
});
console.info(authorizer)
const server = Server.configure({
port: process.env.PORT || 4000,
port,
onConnect({ connection }) {
connection.requiresAuthentication = true;
},
@ -18,6 +22,10 @@ const server = Server.configure({
return null;
}
const parsedUrl = url.parse(data.socket.url, true);
const shout_id = parsedUrl.query.shout_id;
console.debug(`parsed socket url shout_id extracted: ${shout_id}`);
const params = {
token_type: 'access_token',
token: data.requestHeaders['authorization'] || '',
@ -28,19 +36,62 @@ const server = Server.configure({
return null;
}
return authorizer.validateJWTToken(params)
authorizer.validateJWTToken(params)
.then(response => {
if (!response?.data?.is_valid) {
console.error('Invalid authorization token');
return null;
}
const { sub: user, allowed_roles: roles } = response.data.claims;
console.debug(`user_id: ${user} roles: ${roles}`);
const { sub: user_id, allowed_roles: roles } = response.data.claims
console.debug(`user_id: ${user_id} roles: ${roles}`)
if (roles.includes('editor')) {
return {
id: user,
roles: Array.isArray(roles) ? roles : [roles],
id: user_id,
roles: Array.isArray(roles) ? roles : roles.split(',')
}
}
authorizer.getProfile(params).then((r) => {
console.debug(r)
const { profile: author } = r.data.app_data
const author_id = author.get('id')
if(author_id) {
const query = `
query {
get_shout(shout_id: $shout_id) {
id
slug
authors
}
}
`;
fetch('https://core.discours.io/graphql', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ query, variables: { shout_id } }),
})
.then(res => res.json())
.then(data => {
console.debug(data)
const { authors } = data.get_shout;
if (authors.includes(author_id)) {
return {
id: user_id,
author: author_id,
roles: Array.isArray(roles) ? roles : roles.split(','),
};
}
return null;
})
.catch(e => {
console.error('Error fetching shout data:', e.message);
console.error(e.stack);
return null;
});
}
})
})
.catch(e => {
console.error('Error validating authorization token:', e.message);
@ -50,4 +101,4 @@ const server = Server.configure({
},
});
server.listen();
server.listen().then(r => console.info(r));