summary refs log tree commit diff
path: root/src/api/routes/users/@me/connections/#connection_name/#connection_id/access-token.ts
blob: 8d51a770448d5ff18e3b5d108ff9833b1fc5afdc (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
import { route } from "@fosscord/api";
import {
	ApiError,
	ConnectedAccount,
	ConnectionStore,
	DiscordApiErrors,
	FieldErrors,
} from "@fosscord/util";
import { Request, Response, Router } from "express";
import RefreshableConnection from "../../../../../../../util/connections/RefreshableConnection";
const router = Router();

// TODO: this route is only used for spotify, twitch, and youtube. (battlenet seems to be able to PUT, maybe others also)

// spotify is disabled here because it cant be used
const ALLOWED_CONNECTIONS = ["twitch", "youtube"];

router.get("/", route({}), async (req: Request, res: Response) => {
	// TODO: get the current access token or refresh it if it's expired
	const { connection_name, connection_id } = req.params;

	const connection = ConnectionStore.connections.get(connection_id);

	if (!ALLOWED_CONNECTIONS.includes(connection_name) || !connection)
		throw FieldErrors({
			provider_id: {
				code: "BASE_TYPE_CHOICES",
				message: req.t("common:field.BASE_TYPE_CHOICES", {
					types: ALLOWED_CONNECTIONS.join(", "),
				}),
			},
		});

	if (!connection.settings.enabled)
		throw FieldErrors({
			provider_id: {
				message: "This connection has been disabled server-side.",
			},
		});

	const connectedAccount = await ConnectedAccount.findOne({
		where: {
			type: connection_name,
			id: connection_id,
			user_id: req.user_id,
		},
		select: [
			"external_id",
			"type",
			"name",
			"verified",
			"visibility",
			"show_activity",
			"revoked",
			"token_data",
			"friend_sync",
			"integrations",
		],
	});
	if (!connectedAccount) throw DiscordApiErrors.UNKNOWN_CONNECTION;
	if (connectedAccount.revoked)
		throw new ApiError("Connection revoked", 0, 400);
	if (!connectedAccount.token_data)
		throw new ApiError("No token data", 0, 400);

	let access_token = connectedAccount.token_data.access_token;
	const { expires_at, expires_in } = connectedAccount.token_data;

	if (expires_at && expires_at < Date.now()) {
		if (!(connection instanceof RefreshableConnection))
			throw new ApiError("Access token expired", 0, 400);
		const tokenData = await connection.refresh(connectedAccount);
		access_token = tokenData.access_token;
	} else if (expires_in && expires_in < Date.now()) {
		if (!(connection instanceof RefreshableConnection))
			throw new ApiError("Access token expired", 0, 400);
		const tokenData = await connection.refresh(connectedAccount);
		access_token = tokenData.access_token;
	}

	res.json({ access_token });
});

export default router;