25 lines
940 B
JavaScript
25 lines
940 B
JavaScript
|
const {models} = require('vn-loopback/server/server');
|
||
|
|
|
||
|
|
module.exports = function(options) {
|
||
|
|
return async function(req, res, next) {
|
||
|
|
const token = req.headers.authorization;
|
||
|
|
if (!token) return next();
|
||
|
|
|
||
|
|
const accessToken = await models.AccessToken.findById(token);
|
||
|
|
if (!accessToken) return next();
|
||
|
|
const maxDate = accessToken.created.setSeconds(accessToken.ttl);
|
||
|
|
if (new Date().getTime() > new Date(maxDate)) return next();
|
||
|
|
|
||
|
|
const vnUser = await models.VnUser.findById(accessToken.userId);
|
||
|
|
if (!vnUser) return next();
|
||
|
|
const newToken = await vnUser.createAccessToken(accessToken.ttl);
|
||
|
|
|
||
|
|
// console.log(accessToken, newToken);
|
||
|
|
// req.accessToken = newToken;
|
||
|
|
// res.headers.authorization = newToken;
|
||
|
|
res.setHeader('Authorization', newToken.id);
|
||
|
|
// const removed = await accessToken.delete({id: token});
|
||
|
|
next();
|
||
|
|
};
|
||
|
|
};
|