Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 | 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 6x 6x 6x 6x 3x 3x 3x 3x 6x 6x 1x 1x 2x 2x 2x 2x 2x 2x 2x 2x 2x 1x 1x 9x 9x 9x 9x 9x 9x 2x 2x 2x 7x 7x 7x 9x 9x 1x 1x | import {Request, Response} from "express";
import * as usersService from "../services/users_service";
import {handleError} from "../utils/handle_error";
import {RefreshTokenModel} from "../models/refresh_token_model";
import jwt from "jsonwebtoken";
import config from "../config/config";
import {blacklistToken, updateRefreshTokenAccessToken} from "../services/users_service";
import {CustomRequest} from "types/customRequest";
export const loginUser = async (req: Request, res: Response): Promise<void> => {
try {
const { email, password } = req.body;
const tokens = await usersService.loginUser(email, password);
if (!tokens) {
res.status(401).json({ message: 'Invalid credentials' });
return;
}
res.json(tokens);
} catch (err) {
handleError(err, res);
}
};
// TODO - Also cancel the token of the user
export const logoutUser = async (req: CustomRequest, res: Response): Promise<void> => {
try {
const { refreshToken } = req.body;
const result = await usersService.logoutUser(refreshToken, req.user.id);
if (!result) {
res.status(401).json({ message: 'Invalid refresh token' });
return;
}
res.json({ message: 'User logged out successfully' });
} catch (err) {
handleError(err, res);
}
};
export const registerUser = async (req: Request, res: Response): Promise<void> => {
try {
const { username, password, email } = req.body;
// Check if the user already exists
const existingUser = await usersService.getUserByUsernameOrEmail(username, email);
if (existingUser) {
res.status(400).json({ message: 'Username or email already in use' });
return;
}
const savedUser = await usersService.registerUser(username, password, email);
res.status(201).json(savedUser);
} catch (err) {
handleError(err, res);
}
};
export const refreshToken = async (req: Request, res: Response): Promise<void> => {
try {
const { refreshToken } = req.body;
if (!refreshToken) {
res.status(401).json({ message: 'Refresh token required' });
return;
}
const existingToken = await usersService.findRefreshToken(refreshToken);
if (!existingToken) {
res.status(401).json({ message: 'Invalid refresh token' });
return;
}
const decoded = jwt.verify(refreshToken, config.auth.refresh_token) as { userId: string };
const user = await usersService.getUserById(decoded.userId);
if (!user) {
res.status(401).json({ message: 'Invalid refresh token' });
return;
}
const newAccessToken = jwt.sign({ userId: user.id }, config.auth.access_token, { expiresIn: '15m' });
await usersService.updateRefreshTokenAccessToken(refreshToken, newAccessToken);
res.json({ accessToken: newAccessToken });
} catch (err) {
res.status(401).json({ message: 'Invalid refresh token' });
}
}; |