From a92c6637cea0ce595c712c3d445b57a1184e833e Mon Sep 17 00:00:00 2001 From: Flam3rboy <34555296+Flam3rboy@users.noreply.github.com> Date: Thu, 12 Aug 2021 20:33:42 +0200 Subject: :sparkles: rtc --- rtc/src/util/checkToken.ts | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 rtc/src/util/checkToken.ts (limited to 'rtc/src/util/checkToken.ts') diff --git a/rtc/src/util/checkToken.ts b/rtc/src/util/checkToken.ts new file mode 100644 index 00000000..91bf08d5 --- /dev/null +++ b/rtc/src/util/checkToken.ts @@ -0,0 +1,24 @@ +import { JWTOptions } from "./Constants"; +import jwt from "jsonwebtoken"; +import { UserModel } from "../models"; + +export function checkToken(token: string, jwtSecret: string): Promise { + return new Promise((res, rej) => { + token = token.replace("Bot ", ""); // TODO: proper bot support + jwt.verify(token, jwtSecret, JWTOptions, async (err, decoded: any) => { + if (err || !decoded) return rej("Invalid Token"); + + const user = await UserModel.findOne( + { id: decoded.id }, + { "user_data.valid_tokens_since": true, bot: true, disabled: true, deleted: true } + ).exec(); + if (!user) return rej("Invalid Token"); + // we need to round it to seconds as it saved as seconds in jwt iat and valid_tokens_since is stored in milliseconds + if (decoded.iat * 1000 < user.user_data.valid_tokens_since.setSeconds(0, 0)) return rej("Invalid Token"); + if (user.disabled) return rej("User disabled"); + if (user.deleted) return rej("User not found"); + + return res({ decoded, user }); + }); + }); +} -- cgit 1.5.1