mirror of
https://codeberg.org/timelimit/timelimit-server.git
synced 2026-08-31 19:03:45 +02:00
87 lines
2.7 KiB
TypeScript
87 lines
2.7 KiB
TypeScript
/*
|
|
* server component for the TimeLimit App
|
|
* Copyright (C) 2019 - 2026 Jonas Lochmann
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as
|
|
* published by the Free Software Foundation, version 3 of the License.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
import { Conflict, Unauthorized } from 'http-errors'
|
|
import { SimpleDatabase } from '../../database/simple'
|
|
import { WebsocketApi } from '../../websocket'
|
|
|
|
export const logoutAtPrimaryDevice = async ({ deviceAuthToken, database, websocket }: {
|
|
deviceAuthToken: string
|
|
database: SimpleDatabase
|
|
websocket: WebsocketApi
|
|
// no transaction here because this is directly called from an API endpoint
|
|
}) => {
|
|
await database.transaction(async (transaction) => {
|
|
const ownDeviceEntryUnsafe = await transaction.legacy.database.device.findOne({
|
|
where: {
|
|
deviceAuthToken
|
|
},
|
|
transaction: transaction.legacy.transaction,
|
|
attributes: ['familyId', 'currentUserId', 'deviceId']
|
|
})
|
|
|
|
if (!ownDeviceEntryUnsafe) {
|
|
throw new Unauthorized()
|
|
}
|
|
|
|
const ownDeviceEntry = {
|
|
familyId: ownDeviceEntryUnsafe.familyId,
|
|
currentUserId: ownDeviceEntryUnsafe.currentUserId
|
|
}
|
|
|
|
const deviceUserEntryUnsafe = await transaction.legacy.database.user.findOne({
|
|
where: {
|
|
familyId: ownDeviceEntry.familyId,
|
|
userId: ownDeviceEntry.currentUserId,
|
|
type: 'child'
|
|
},
|
|
attributes: ['currentDevice'],
|
|
transaction: transaction.legacy.transaction
|
|
})
|
|
|
|
if (!deviceUserEntryUnsafe) {
|
|
throw new Conflict()
|
|
}
|
|
|
|
const deviceUserEntry = {
|
|
currentDevice: deviceUserEntryUnsafe.currentDevice
|
|
}
|
|
|
|
const otherDeviceEntryUnsafe = await transaction.legacy.database.device.findOne({
|
|
where: {
|
|
familyId: ownDeviceEntry.familyId,
|
|
deviceId: deviceUserEntry.currentDevice,
|
|
currentUserId: ownDeviceEntry.currentUserId
|
|
},
|
|
attributes: ['deviceAuthToken'],
|
|
transaction: transaction.legacy.transaction
|
|
})
|
|
|
|
if (!otherDeviceEntryUnsafe) {
|
|
throw new Conflict()
|
|
}
|
|
|
|
const otherDeviceEntry = {
|
|
deviceAuthToken: otherDeviceEntryUnsafe.deviceAuthToken
|
|
}
|
|
|
|
websocket.triggerLogoutByDeviceAuthToken({
|
|
deviceAuthToken: otherDeviceEntry.deviceAuthToken
|
|
})
|
|
})
|
|
}
|