diff --git a/backend/src/controllers/v3/authController.ts b/backend/src/controllers/v3/authController.ts index 3e4b3e48a..ccbded266 100644 --- a/backend/src/controllers/v3/authController.ts +++ b/backend/src/controllers/v3/authController.ts @@ -50,8 +50,9 @@ export const login1 = async (req: Request, res: Response) => { let userId = ''; if (providerAuthToken) { const decodedToken = ( - jwt.verify(providerAuthToken, getJwtProviderAuthSecret()) + jwt.verify(providerAuthToken, await getJwtProviderAuthSecret()) ); + userId = decodedToken.userId; } @@ -118,7 +119,7 @@ export const login2 = async (req: Request, res: Response) => { let userId = ''; if (providerAuthToken) { const decodedToken = ( - jwt.verify(providerAuthToken, getJwtProviderAuthSecret()) + jwt.verify(providerAuthToken, await getJwtProviderAuthSecret()) ); userId = decodedToken.userId; } @@ -166,8 +167,8 @@ export const login2 = async (req: Request, res: Response) => { payload: { userId: user._id.toString() }, - expiresIn: getJwtMfaLifetime(), - secret: getJwtMfaSecret() + expiresIn: await getJwtMfaLifetime(), + secret: await getJwtMfaSecret() }); const code = await TokenService.createToken({ @@ -205,7 +206,7 @@ export const login2 = async (req: Request, res: Response) => { httpOnly: true, path: '/', sameSite: 'strict', - secure: getHttpsEnabled() + secure: await getHttpsEnabled() }); // case: user does not have MFA enablgged diff --git a/backend/src/index.ts b/backend/src/index.ts index a250fc6bc..e63ec0e96 100644 --- a/backend/src/index.ts +++ b/backend/src/index.ts @@ -107,7 +107,7 @@ const main = async () => { app.use(requestIp.mw()); app.use(session({ - secret: getSessionSecret(), + secret: await getSessionSecret(), resave: false, // don't save session if unmodified saveUninitialized: false, // don't create session until something stored })); diff --git a/backend/src/routes/v1/auth.ts b/backend/src/routes/v1/auth.ts index 4ce4bb6f0..0999e9a2d 100644 --- a/backend/src/routes/v1/auth.ts +++ b/backend/src/routes/v1/auth.ts @@ -38,8 +38,8 @@ passport.use(new GoogleStrategy({ userId: user._id.toString(), email: user.email, }, - expiresIn: getJwtProviderAuthLifetime(), - secret: getJwtProviderAuthSecret(), + expiresIn: await getJwtProviderAuthLifetime(), + secret: await getJwtProviderAuthSecret(), }); req.providerAuthToken = providerAuthToken;