Gestione Refresh Token Completata !

This commit is contained in:
Surya Paolo
2024-04-11 11:43:19 +02:00
parent 07c210c59e
commit c2d76ff10a
12 changed files with 51 additions and 29 deletions

View File

@@ -63,6 +63,7 @@ const UserSchema = new mongoose.Schema({
type: String,
required: true,
},
group: {
type: Number,
},
@@ -538,9 +539,11 @@ UserSchema.methods.generateAuthToken = function (req) {
let token = null;
let numsec = process.env.TOKEN_LIFE;
if (attiva_scadenza)
token = jwt.sign({ _id: prova, smart: user._id.toHexString(), access, un: user.username },
process.env.SIGNCODE, { expiresIn: process.env.TOKEN_LIFE }).toString();
process.env.SIGNCODE, { expiresIn: numsec }).toString();
else
token = jwt.sign({ _id: prova, smart: user._id.toHexString(), access, un: user.username },
process.env.SIGNCODE).toString();
@@ -560,6 +563,7 @@ UserSchema.methods.generateAuthToken = function (req) {
user.lasttimeonline = new Date();
return user.save().then(() => {
console.log('Salvato refreshToken su DB', refreshToken);
// console.log("TOKEN CREATO IN LOGIN : " + token);
return { token, refreshToken };
}).catch(err => {
@@ -721,10 +725,9 @@ UserSchema.statics.findByToken = async function (token, typeaccess, con_auth) {
if (e.expiredAt) {
code = server_constants.RIS_CODE_HTTP_FORBIDDEN_TOKEN_EXPIRED;
if (con_auth) {
return { user: null, code: server_constants.RIS_CODE_HTTP_FORBIDDEN_TOKEN_EXPIRED };
} else {
return { user: null, code };
}
} else {
console.error('Err findByToken:', e);
@@ -765,6 +768,7 @@ UserSchema.statics.findByTokenAnyAccess = function (token) {
try {
decoded = jwt.verify(token, process.env.SIGNCODE);
} catch (e) {
console.error('Err findByTokenAnyAccess:', e);
return Promise.resolve(null);
}