190f0b6dc5
* chore: Separate signin/auth middleware fix: Email signin token parsed by JWT middleware fix: Email signin marked as active when logging in as suspended fix: Suspended email signin correctly redirected to login screen closes #1740 * refactor middleware -> lib * lint
83 lines
2.2 KiB
JavaScript
83 lines
2.2 KiB
JavaScript
// @flow
|
|
import addMonths from "date-fns/add_months";
|
|
import { type Context } from "koa";
|
|
import { User, Event, Team } from "../models";
|
|
import { getCookieDomain } from "../utils/domains";
|
|
|
|
export function getAllowedDomains(): string[] {
|
|
// GOOGLE_ALLOWED_DOMAINS included here for backwards compatability
|
|
const env = process.env.ALLOWED_DOMAINS || process.env.GOOGLE_ALLOWED_DOMAINS;
|
|
return env ? env.split(",") : [];
|
|
}
|
|
|
|
export function signIn(
|
|
ctx: Context,
|
|
user: User,
|
|
team: Team,
|
|
service: string,
|
|
isFirstSignin: boolean = false
|
|
) {
|
|
if (user.isSuspended) {
|
|
return ctx.redirect("/?notice=suspended");
|
|
}
|
|
|
|
// update the database when the user last signed in
|
|
user.updateSignedIn(ctx.request.ip);
|
|
|
|
// don't await event creation for a faster sign-in
|
|
Event.create({
|
|
name: "users.signin",
|
|
actorId: user.id,
|
|
userId: user.id,
|
|
teamId: team.id,
|
|
data: {
|
|
name: user.name,
|
|
service,
|
|
},
|
|
ip: ctx.request.ip,
|
|
});
|
|
|
|
const domain = getCookieDomain(ctx.request.hostname);
|
|
const expires = addMonths(new Date(), 3);
|
|
|
|
// set a cookie for which service we last signed in with. This is
|
|
// only used to display a UI hint for the user for next time
|
|
ctx.cookies.set("lastSignedIn", service, {
|
|
httpOnly: false,
|
|
expires: new Date("2100"),
|
|
domain,
|
|
});
|
|
|
|
// set a transfer cookie for the access token itself and redirect
|
|
// to the teams subdomain if subdomains are enabled
|
|
if (process.env.SUBDOMAINS_ENABLED === "true" && team.subdomain) {
|
|
// get any existing sessions (teams signed in) and add this team
|
|
const existing = JSON.parse(
|
|
decodeURIComponent(ctx.cookies.get("sessions") || "") || "{}"
|
|
);
|
|
const sessions = encodeURIComponent(
|
|
JSON.stringify({
|
|
...existing,
|
|
[team.id]: {
|
|
name: team.name,
|
|
logoUrl: team.logoUrl,
|
|
url: team.url,
|
|
},
|
|
})
|
|
);
|
|
ctx.cookies.set("sessions", sessions, {
|
|
httpOnly: false,
|
|
expires,
|
|
domain,
|
|
});
|
|
|
|
ctx.redirect(`${team.url}/auth/redirect?token=${user.getTransferToken()}`);
|
|
} else {
|
|
ctx.cookies.set("accessToken", user.getJwtToken(), {
|
|
httpOnly: false,
|
|
expires,
|
|
});
|
|
ctx.redirect(`${team.url}/home${isFirstSignin ? "?welcome" : ""}`);
|
|
}
|
|
}
|