Add frontend, backend and CLI

backend/src/helpers/auth.ts

@@ -0,0 +1,102 @@
+import jwt from 'jsonwebtoken';
+import * as Sentry from '@sentry/node';
+import {
+	User
+} from '../models';
+import {
+	JWT_AUTH_LIFETIME,
+	JWT_AUTH_SECRET,
+	JWT_REFRESH_LIFETIME,
+	JWT_REFRESH_SECRET
+} from '../config';
+
+/**
+ * Return newly issued (JWT) auth and refresh tokens to user with id [userId]
+ * @param {Object} obj
+ * @param {String} obj.userId - id of user who we are issuing tokens for
+ * @return {Object} obj
+ * @return {String} obj.token - issued JWT token
+ * @return {String} obj.refreshToken - issued refresh token
+ */
+const issueTokens = async ({ userId }: { userId: string }) => {
+	let token: string;
+	let refreshToken: string;
+	try {
+		// issue tokens
+		token = createToken({
+			payload: {
+				userId
+			},
+			expiresIn: JWT_AUTH_LIFETIME,
+			secret: JWT_AUTH_SECRET
+		});
+
+		refreshToken = createToken({
+			payload: {
+				userId
+			},
+			expiresIn: JWT_REFRESH_LIFETIME,
+			secret: JWT_REFRESH_SECRET
+		});
+	} catch (err) {
+		Sentry.setUser(null);
+		Sentry.captureException(err);
+		throw new Error('Failed to issue tokens');
+	}
+
+	return {
+		token,
+		refreshToken
+	};
+};
+
+/**
+ * Remove JWT and refresh tokens for user with id [userId]
+ * @param {Object} obj
+ * @param {String} obj.userId - id of user whose tokens are cleared.
+ */
+const clearTokens = async ({ userId }: { userId: string }): Promise<void> => {
+	try {
+		// increment refreshVersion on user by 1
+		User.findOneAndUpdate({
+			_id: userId
+		}, {
+			$inc: {
+				refreshVersion: 1
+			}
+		});
+	} catch (err) {
+		Sentry.setUser(null);
+		Sentry.captureException(err);
+	}
+};
+
+/**
+ * Return a new (JWT) token for user with id [userId] that expires in [expiresIn]; can be used to, for instance, generate
+ * bearer/auth, refresh, and temporary signup tokens
+ * @param {Object} obj
+ * @param {Object} obj.payload - payload of (JWT) token
+ * @param {String} obj.secret - (JWT) secret such as [JWT_AUTH_SECRET]
+ * @param {String} obj.expiresIn - string describing time span such as '10h' or '7d'
+ */
+const createToken = ({
+	payload,
+	expiresIn,
+	secret
+}: {
+	payload: any;
+	expiresIn: string | number;
+	secret: string;
+}) => {
+	try {
+		return jwt.sign(payload, secret, {
+			expiresIn
+		});
+	} catch (err) {
+		Sentry.setUser(null);
+		Sentry.captureException(err);
+		throw new Error('Failed to create a token');
+	}
+};
+
+export { createToken, issueTokens, clearTokens };