All files / server/src/features/user/session-restore sessionRestoreService.ts

78.26% Statements 18/23
61.11% Branches 11/18
100% Functions 1/1
78.26% Lines 18/23

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104            42x       421x   421x 8x             419x               419x   419x               419x 413x 413x               413x   413x 1x             412x 412x               412x                     412x                                     417x            
import { PostSessionRecoveryResponse } from "shared/types/api/login";
import { UserGroup } from "shared/types/models/user";
import { findOrCreateSettings } from "server/features/settings/settingsRepository";
import { findUser } from "server/features/user/userRepository";
import { decodeJWT, getJWT, verifyJWT } from "server/utils/jwt";
 
export const loginWithJwt = async (
  jwt: string,
): Promise<PostSessionRecoveryResponse> => {
  // Restore session
  const jwtData = decodeJWT(jwt);
 
  if (!jwtData) {
    return {
      message: "Invalid jwt",
      status: "error",
      errorId: "sessionExpired",
    };
  }
 
  Iif (!Object.values(UserGroup).includes(jwtData.userGroup)) {
    return {
      message: "Invalid userGroup",
      status: "error",
      errorId: "sessionExpired",
    };
  }
 
  const jwtResponse = verifyJWT(jwt, jwtData.userGroup);
 
  Iif (jwtResponse.status === "error") {
    return {
      message: "Login expired",
      status: "error",
      errorId: "sessionExpired",
    };
  }
 
  Eif (typeof jwtResponse.body.username === "string") {
    const userResult = await findUser(jwtResponse.body.username);
    Iif (!userResult.ok) {
      return {
        message: "Session restore error",
        status: "error",
        errorId: "unknown",
      };
    }
 
    const user = userResult.value;
 
    if (!user) {
      return {
        errorId: "loginFailed",
        message: "User login error",
        status: "error",
      };
    }
 
    const findSettingsResult = await findOrCreateSettings();
    Iif (!findSettingsResult.ok) {
      return {
        message: "User login error",
        status: "error",
        errorId: "unknown",
      };
    }
 
    Iif (
      !findSettingsResult.value.appOpen &&
      user.userGroup === UserGroup.USER
    ) {
      return {
        errorId: "loginDisabled",
        message: "User login disabled",
        status: "error",
      };
    }
 
    return {
      message: "Session restore success",
      status: "success",
      username: user.username,
      userGroup: user.userGroup,
      serial: user.serial,
      groupCode: user.groupCode,
      isGroupCreator: user.isGroupCreator,
      jwt: getJWT(user.userGroup, user.username),
      eventLogItems: user.eventLogItems,
      kompassiUsernameAccepted: user.kompassiUsernameAccepted,
      kompassiId: user.kompassiId,
      email: user.email,
      emailNotificationPermitAsked: user.emailNotificationPermitAsked,
    };
  }
 
  // Reached when the verified token carries no username, i.e. the token is
  // malformed rather than the server having a problem
  return {
    message: "Restoring session failed",
    status: "error",
    errorId: "sessionExpired",
  };
};