104 lines
3.8 KiB
JavaScript
104 lines
3.8 KiB
JavaScript
import { Authorizer } from '@authorizerdev/authorizer-js';
|
|
import { Server } from '@hocuspocus/server'
|
|
|
|
|
|
const port = process.env.PORT || 4000
|
|
const authorizer = new Authorizer({
|
|
clientID: process.env.AUTHORIZER_CLIENT_ID || '',
|
|
authorizerURL: process.env.AUTHORIZER_URL || 'https://auth.discours.io',
|
|
redirectURL: process.env.REDIRECT_URL || 'https://testing.discours.io',
|
|
});
|
|
|
|
console.info(authorizer)
|
|
|
|
const server = Server.configure({
|
|
port,
|
|
onConnect({ connection }) {
|
|
connection.requiresAuthentication = true;
|
|
},
|
|
onAuthenticate(data) {
|
|
console.debug(data)
|
|
if (!data.requestHeaders) {
|
|
console.error('Request headers not found');
|
|
return null;
|
|
}
|
|
const shout_id = parseInt(data.documentName.replace('shout-', ''), 10)
|
|
console.debug(`shout_id extracted: ${shout_id}`);
|
|
|
|
const params = {
|
|
token_type: 'access_token',
|
|
token: data.requestHeaders['authorization'] || '',
|
|
};
|
|
|
|
if (!params.token) {
|
|
console.error('Authorization token not found');
|
|
return null;
|
|
}
|
|
|
|
authorizer.validateJWTToken(params)
|
|
.then(response => {
|
|
if (!response?.data?.is_valid) {
|
|
console.error('Invalid authorization token');
|
|
return null;
|
|
}
|
|
|
|
const { sub: user_id, allowed_roles: roles } = response.data.claims
|
|
console.debug(`user_id: ${user_id} roles: ${roles}`)
|
|
|
|
if (roles.includes('editor')) {
|
|
return {
|
|
id: user_id,
|
|
roles: Array.isArray(roles) ? roles : roles.split(',')
|
|
}
|
|
}
|
|
|
|
authorizer.getProfile(params).then((r) => {
|
|
console.debug(r)
|
|
const { profile: author } = r.data.app_data
|
|
const author_id = author.get('id')
|
|
if(author_id) {
|
|
const query = `
|
|
query {
|
|
get_shout(shout_id: $shout_id) {
|
|
id
|
|
slug
|
|
authors
|
|
}
|
|
}
|
|
`;
|
|
fetch('https://core.discours.io/graphql', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ query, variables: { shout_id } }),
|
|
})
|
|
.then(res => res.json())
|
|
.then(data => {
|
|
console.debug(data)
|
|
const { authors } = data.get_shout;
|
|
if (authors.includes(author_id)) {
|
|
return {
|
|
id: user_id,
|
|
author: author_id,
|
|
roles: Array.isArray(roles) ? roles : roles.split(','),
|
|
};
|
|
}
|
|
return null;
|
|
})
|
|
.catch(e => {
|
|
console.error('Error fetching shout data:', e.message);
|
|
console.error(e.stack);
|
|
return null;
|
|
});
|
|
}
|
|
})
|
|
})
|
|
.catch(e => {
|
|
console.error('Error validating authorization token:', e.message);
|
|
console.error(e.stack);
|
|
return null;
|
|
});
|
|
},
|
|
});
|
|
|
|
server.listen().then(r => console.info(r));
|