mirror of
https://github.com/warmbly/warmbly.git
synced 2026-09-11 16:08:09 +00:00
Matthew Meszaros
218af13dd9
Add authenticated session listing and revocation APIs, track the auth provider on sessions, and expose active session controls in account security settings.
56 lines
2.3 KiB
Go
56 lines
2.3 KiB
Go
package token
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
"github.com/warmbly/warmbly/internal/errx"
|
|
"github.com/warmbly/warmbly/internal/infrastructure/cache"
|
|
"github.com/warmbly/warmbly/internal/infrastructure/db"
|
|
"github.com/warmbly/warmbly/internal/models"
|
|
"github.com/warmbly/warmbly/internal/pkg/geo"
|
|
"github.com/warmbly/warmbly/internal/repository"
|
|
)
|
|
|
|
type TokenService interface {
|
|
GenerateToken(userID, sessionID uuid.UUID, email, nonce string, issuedAt, expiresAt time.Time) (string, error)
|
|
VerifyToken(tokenStr string) (*TokenClaims, *errx.Error)
|
|
GenerateSession(ctx context.Context, userID uuid.UUID, email, ipaddr, userAgent, authProvider string) (*models.Token, *errx.Error)
|
|
GenerateSessionWithOrg(ctx context.Context, userID uuid.UUID, email, ipaddr, userAgent, authProvider string, orgID *uuid.UUID) (*models.Token, *errx.Error)
|
|
GetSession(ctx context.Context, sessionID uuid.UUID) (*models.Session, *errx.Error)
|
|
ValidateAccessToken(ctx context.Context, accessToken string) (*models.Session, *errx.Error)
|
|
RefreshToken(ctx context.Context, refreshToken string) (*models.Token, *errx.Error)
|
|
|
|
RevokeSession(ctx context.Context, accessToken string) *errx.Error
|
|
RevokeAllSession(ctx context.Context, accessToken string) *errx.Error
|
|
|
|
// Self-service session management (account security page)
|
|
ListSessions(ctx context.Context, userID, currentSessionID uuid.UUID) ([]SessionView, *errx.Error)
|
|
RevokeSessionByID(ctx context.Context, userID, sessionID, currentSessionID uuid.UUID) *errx.Error
|
|
RevokeOtherSessions(ctx context.Context, userID, currentSessionID uuid.UUID) *errx.Error
|
|
|
|
// Organization switching
|
|
SwitchOrganization(ctx context.Context, sessionID uuid.UUID, orgID *uuid.UUID) *errx.Error
|
|
GetCurrentOrganization(ctx context.Context, sessionID uuid.UUID) (*uuid.UUID, *errx.Error)
|
|
}
|
|
|
|
type tokenService struct {
|
|
db *db.DB
|
|
tokenRepository repository.TokenRepository
|
|
geo *geo.Client
|
|
cache *cache.Cache
|
|
|
|
AuthSecret string
|
|
}
|
|
|
|
func NewService(db *db.DB, tokenRepository repository.TokenRepository, cache *cache.Cache, geo *geo.Client, authSecret string) TokenService {
|
|
return &tokenService{
|
|
db: db,
|
|
tokenRepository: tokenRepository,
|
|
geo: geo,
|
|
cache: cache,
|
|
AuthSecret: authSecret,
|
|
}
|
|
}
|