38627-vm/backend/src/db/api/auth_sessions.js
2026-02-19 21:50:12 +00:00

613 lines
15 KiB
JavaScript

const db = require('../models');
const FileDBApi = require('./file');
const crypto = require('crypto');
const Utils = require('../utils');
const Sequelize = db.Sequelize;
const Op = Sequelize.Op;
module.exports = class Auth_sessionsDBApi {
static async create(data, options) {
const currentUser = (options && options.currentUser) || { id: null };
const transaction = (options && options.transaction) || undefined;
const auth_sessions = await db.auth_sessions.create(
{
id: data.id || undefined,
auth_type: data.auth_type
||
null
,
token_fingerprint: data.token_fingerprint
||
null
,
issued_at: data.issued_at
||
null
,
expires_at: data.expires_at
||
null
,
revoked_at: data.revoked_at
||
null
,
ip_address: data.ip_address
||
null
,
user_agent: data.user_agent
||
null
,
importHash: data.importHash || null,
createdById: currentUser.id,
updatedById: currentUser.id,
},
{ transaction },
);
await auth_sessions.setUser( data.user || null, {
transaction,
});
await auth_sessions.setSchool( data.school || null, {
transaction,
});
return auth_sessions;
}
static async bulkImport(data, options) {
const currentUser = (options && options.currentUser) || { id: null };
const transaction = (options && options.transaction) || undefined;
// Prepare data - wrapping individual data transformations in a map() method
const auth_sessionsData = data.map((item, index) => ({
id: item.id || undefined,
auth_type: item.auth_type
||
null
,
token_fingerprint: item.token_fingerprint
||
null
,
issued_at: item.issued_at
||
null
,
expires_at: item.expires_at
||
null
,
revoked_at: item.revoked_at
||
null
,
ip_address: item.ip_address
||
null
,
user_agent: item.user_agent
||
null
,
importHash: item.importHash || null,
createdById: currentUser.id,
updatedById: currentUser.id,
createdAt: new Date(Date.now() + index * 1000),
}));
// Bulk create items
const auth_sessions = await db.auth_sessions.bulkCreate(auth_sessionsData, { transaction });
// For each item created, replace relation files
return auth_sessions;
}
static async update(id, data, options) {
const currentUser = (options && options.currentUser) || {id: null};
const transaction = (options && options.transaction) || undefined;
const globalAccess = currentUser.app_role?.globalAccess;
const auth_sessions = await db.auth_sessions.findByPk(id, {}, {transaction});
const updatePayload = {};
if (data.auth_type !== undefined) updatePayload.auth_type = data.auth_type;
if (data.token_fingerprint !== undefined) updatePayload.token_fingerprint = data.token_fingerprint;
if (data.issued_at !== undefined) updatePayload.issued_at = data.issued_at;
if (data.expires_at !== undefined) updatePayload.expires_at = data.expires_at;
if (data.revoked_at !== undefined) updatePayload.revoked_at = data.revoked_at;
if (data.ip_address !== undefined) updatePayload.ip_address = data.ip_address;
if (data.user_agent !== undefined) updatePayload.user_agent = data.user_agent;
updatePayload.updatedById = currentUser.id;
await auth_sessions.update(updatePayload, {transaction});
if (data.user !== undefined) {
await auth_sessions.setUser(
data.user,
{ transaction }
);
}
if (data.school !== undefined) {
await auth_sessions.setSchool(
data.school,
{ transaction }
);
}
return auth_sessions;
}
static async deleteByIds(ids, options) {
const currentUser = (options && options.currentUser) || { id: null };
const transaction = (options && options.transaction) || undefined;
const auth_sessions = await db.auth_sessions.findAll({
where: {
id: {
[Op.in]: ids,
},
},
transaction,
});
await db.sequelize.transaction(async (transaction) => {
for (const record of auth_sessions) {
await record.update(
{deletedBy: currentUser.id},
{transaction}
);
}
for (const record of auth_sessions) {
await record.destroy({transaction});
}
});
return auth_sessions;
}
static async remove(id, options) {
const currentUser = (options && options.currentUser) || {id: null};
const transaction = (options && options.transaction) || undefined;
const auth_sessions = await db.auth_sessions.findByPk(id, options);
await auth_sessions.update({
deletedBy: currentUser.id
}, {
transaction,
});
await auth_sessions.destroy({
transaction
});
return auth_sessions;
}
static async findBy(where, options) {
const transaction = (options && options.transaction) || undefined;
const auth_sessions = await db.auth_sessions.findOne(
{ where },
{ transaction },
);
if (!auth_sessions) {
return auth_sessions;
}
const output = auth_sessions.get({plain: true});
output.user = await auth_sessions.getUser({
transaction
});
output.school = await auth_sessions.getSchool({
transaction
});
return output;
}
static async findAll(
filter,
globalAccess, options
) {
const limit = filter.limit || 0;
let offset = 0;
let where = {};
const currentPage = +filter.page;
const user = (options && options.currentUser) || null;
const userSchools = (user && user.schools?.id) || null;
if (userSchools) {
if (options?.currentUser?.schoolsId) {
where.schoolsId = options.currentUser.schoolsId;
}
}
offset = currentPage * limit;
const orderBy = null;
const transaction = (options && options.transaction) || undefined;
let include = [
{
model: db.users,
as: 'user',
where: filter.user ? {
[Op.or]: [
{ id: { [Op.in]: filter.user.split('|').map(term => Utils.uuid(term)) } },
{
firstName: {
[Op.or]: filter.user.split('|').map(term => ({ [Op.iLike]: `%${term}%` }))
}
},
]
} : {},
},
{
model: db.schools,
as: 'school',
},
];
if (filter) {
if (filter.id) {
where = {
...where,
['id']: Utils.uuid(filter.id),
};
}
if (filter.token_fingerprint) {
where = {
...where,
[Op.and]: Utils.ilike(
'auth_sessions',
'token_fingerprint',
filter.token_fingerprint,
),
};
}
if (filter.ip_address) {
where = {
...where,
[Op.and]: Utils.ilike(
'auth_sessions',
'ip_address',
filter.ip_address,
),
};
}
if (filter.user_agent) {
where = {
...where,
[Op.and]: Utils.ilike(
'auth_sessions',
'user_agent',
filter.user_agent,
),
};
}
if (filter.issued_atRange) {
const [start, end] = filter.issued_atRange;
if (start !== undefined && start !== null && start !== '') {
where = {
...where,
issued_at: {
...where.issued_at,
[Op.gte]: start,
},
};
}
if (end !== undefined && end !== null && end !== '') {
where = {
...where,
issued_at: {
...where.issued_at,
[Op.lte]: end,
},
};
}
}
if (filter.expires_atRange) {
const [start, end] = filter.expires_atRange;
if (start !== undefined && start !== null && start !== '') {
where = {
...where,
expires_at: {
...where.expires_at,
[Op.gte]: start,
},
};
}
if (end !== undefined && end !== null && end !== '') {
where = {
...where,
expires_at: {
...where.expires_at,
[Op.lte]: end,
},
};
}
}
if (filter.revoked_atRange) {
const [start, end] = filter.revoked_atRange;
if (start !== undefined && start !== null && start !== '') {
where = {
...where,
revoked_at: {
...where.revoked_at,
[Op.gte]: start,
},
};
}
if (end !== undefined && end !== null && end !== '') {
where = {
...where,
revoked_at: {
...where.revoked_at,
[Op.lte]: end,
},
};
}
}
if (filter.active !== undefined) {
where = {
...where,
active: filter.active === true || filter.active === 'true'
};
}
if (filter.auth_type) {
where = {
...where,
auth_type: filter.auth_type,
};
}
if (filter.school) {
const listItems = filter.school.split('|').map(item => {
return Utils.uuid(item)
});
where = {
...where,
schoolId: {[Op.or]: listItems}
};
}
if (filter.createdAtRange) {
const [start, end] = filter.createdAtRange;
if (start !== undefined && start !== null && start !== '') {
where = {
...where,
['createdAt']: {
...where.createdAt,
[Op.gte]: start,
},
};
}
if (end !== undefined && end !== null && end !== '') {
where = {
...where,
['createdAt']: {
...where.createdAt,
[Op.lte]: end,
},
};
}
}
}
if (globalAccess) {
delete where.schoolsId;
}
const queryOptions = {
where,
include,
distinct: true,
order: filter.field && filter.sort
? [[filter.field, filter.sort]]
: [['createdAt', 'desc']],
transaction: options?.transaction,
logging: console.log
};
if (!options?.countOnly) {
queryOptions.limit = limit ? Number(limit) : undefined;
queryOptions.offset = offset ? Number(offset) : undefined;
}
try {
const { rows, count } = await db.auth_sessions.findAndCountAll(queryOptions);
return {
rows: options?.countOnly ? [] : rows,
count: count
};
} catch (error) {
console.error('Error executing query:', error);
throw error;
}
}
static async findAllAutocomplete(query, limit, offset, globalAccess, organizationId,) {
let where = {};
if (!globalAccess && organizationId) {
where.organizationId = organizationId;
}
if (query) {
where = {
[Op.or]: [
{ ['id']: Utils.uuid(query) },
Utils.ilike(
'auth_sessions',
'token_fingerprint',
query,
),
],
};
}
const records = await db.auth_sessions.findAll({
attributes: [ 'id', 'token_fingerprint' ],
where,
limit: limit ? Number(limit) : undefined,
offset: offset ? Number(offset) : undefined,
orderBy: [['token_fingerprint', 'ASC']],
});
return records.map((record) => ({
id: record.id,
label: record.token_fingerprint,
}));
}
};