FM / auth

/var/www/qr4y.com/server/delivery/api/controllers/auth/

/var/www/qr4y.com/server/delivery/api/controllers/auth

Name	Size	Mode	Actions
app_sign_in.js	2148	0644	edit dl rm
check_code.js	1749	0644	edit dl rm
refresh_token.js	1148	0644	edit dl rm
reset_password.js	1111	0644	edit dl rm
reset_password_confirm.js	1795	0644	edit dl rm
sign_in.js	4665	0644	edit dl rm
sign_out.js	416	0644	edit dl rm
sign_up.js	5187	0644	edit dl rm

Edit: /var/www/qr4y.com/server/delivery/api/controllers/auth/sign_in.js (4665B)

const bcrypt = require('bcryptjs')
const { isSet, isEmail, isPhone, isEmpty, minLength, isNumber } = require('../../utils/validator.util')
const RefreshTokenUtils = require('../../utils/refreshToken.util')
const { BadRequest, Forbidden, NotFound } = require('../../responseModels/errors')

module.exports = function ({ db, logger }) {
	return async (req, res, next) => {
		try {
			logger.child({ path: req.path }).info()
			const { login, password, app, platform, deviceId, googleId, googleName, fcmToken, googleToken } = req.body
			const ipAddress = req.headers['x-forwarded-for'] || req.socket.remoteAddress
			const userAgent = req.get('User-Agent')

let name = isSet(googleName) ? googleName : ''

if (!isSet(platform)) {
				throw new BadRequest({
					code: 1017,
					lang: req.user?.languageCode
				})
			}
			if (!isSet(app)) {
				throw new BadRequest({
					code: 1018,
					lang: req.user?.languageCode
				})
			}
			if (!isSet(deviceId)) {
				throw new BadRequest({
					code: 1019,
					lang: req.user?.languageCode
				})
			}

let foundUser = null

if (isSet(googleId) && !isEmpty(googleId)) {
				// google авторизация
				// найти пользователя по googleId
				foundUser = await db.user.findOne({ where: { googleId } })

if (!foundUser) {
					// не нашли
					// найти по email
					const roleId = 7; // Client
					foundUser = await db.user.findOne({ where: { email: login } })
					if (!foundUser) {
						// если не нашли создать
						foundUser = await db.user.create({
							name: name,
							email: login,
							roleId,
							googleId
						})
						// !!! создается без логина
						// !!! нужно дать пользователю возможность создать логин если его нет
					} else {
						// если нашли присвоить googleId
						foundUser.googleId = googleId
						await foundUser.save()
					}
				}
			} else {
				// авторизация по логину и паролю
				if ((!isSet(login) || isEmpty(login)) && !isPhone(login) && !isEmail(login)) {
					throw new BadRequest({
						code: 1002,
						lang: req.user?.languageCode
					})
				}
				if (!isSet(password) || isEmpty(password)) {
					throw new BadRequest({
						code: 1005,
						lang: req.user?.languageCode
					})
				}
				let where = {}
				let include = []

if (isPhone(login)) { // авторизация по номеру телефона
					include = [
						{
							model: db.userPhone, where: { phone: login }
						}
					]
				} else if (isEmail(login)) { // авторизация по email
					where = { email: login }
				} else { // авторизация по логину
					throw new BadRequest({
						code: 1002,
						lang: req.user?.languageCode
					})
				}

foundUser = (
					await db.user.findOne({ include, where })
				)

if (!foundUser) {
					throw new BadRequest({
						code: 1007,
						lang: req.user?.languageCode
					})
				}

if (foundUser) {
					const passwordIsValid = await bcrypt.compare(password, foundUser.passwordHash)

if (!passwordIsValid) {
						throw new BadRequest({
							code: 1007,
							lang: req.user?.languageCode
						})
					}
				}
			}

let accessToken = await RefreshTokenUtils.createAccessToken({
				db,
				app,
				deviceId,
				platform,
				userId: foundUser.id
			})
			let refreshToken = await db.refreshToken.findOne({
				where: { app, deviceId, userId: foundUser.id }
			})
			if (refreshToken !== null) {
				await db.refreshToken.destroy({
					where: { id: refreshToken.id }
				})
			}
			refreshToken = await RefreshTokenUtils.createRefreshToken({
				db,
				app,
				deviceId: deviceId.toString(),
				platform,
				userId: foundUser.id.toString()
			})

if (fcmToken) {
				const fToken = await db.userToken.findOne({ where: { token: fcmToken } })
				if (!fToken) {
					db.userToken.create({
						token: fcmToken,
						userId: foundUser.id.toString(),
						deviceId: deviceId.toString()
					})
				}
			}

if (googleToken) {
				const gToken = await db.userGoogleToken.findOne({ where: { token: googleToken } })
				if (!gToken) {
					создать
					db.userGoogleToken.create({
						token: googleToken,
						userId: foundUser.id.toString(),
						deviceId: deviceId.toString()
					})
				}
			}

db.userLoginHistory.create({
				userAgent,
				ipAddress,
				app,
				deviceId: deviceId.toString(),
				platform,
				userId: foundUser.id.toString()
			})

return res.status(200).json({ accessToken, refreshToken })
		} catch (err) {
			next(err)
		}
    }
}

cmd: