59 lines
1.8 KiB
JavaScript
59 lines
1.8 KiB
JavaScript
|
import jwt from 'jsonwebtoken';
|
||
|
|
import dotenv from 'dotenv';
|
||
|
|
|
||
|
|
dotenv.config();
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Decodes and verifies a JWT token.
|
||
|
|
* @param {string} token - The JWT token to verify.
|
||
|
|
* @returns {Promise<Object>} - Resolves with the decoded token payload.
|
||
|
|
*/
|
||
|
|
const getDataFromToken = (token) => {
|
||
|
|
return new Promise((resolve, reject) => {
|
||
|
|
const JWT_SECRET = process.env.JWT_SECRET;
|
||
|
|
jwt.verify(token, JWT_SECRET, (err, decoded) => {
|
||
|
|
err ? reject(err) : resolve(decoded);
|
||
|
|
});
|
||
|
|
});
|
||
|
|
};
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Generates a new JWT token.
|
||
|
|
* @param {Object} payload - The payload to include in the token.
|
||
|
|
* @returns {string} - The generated JWT token.
|
||
|
|
*/
|
||
|
|
const generateAccessToken = (payload) => {
|
||
|
|
const JWT_SECRET = process.env.JWT_SECRET;
|
||
|
|
const JWT_TIME = parseInt(process.env.JWT_TIME, 10);
|
||
|
|
|
||
|
|
return jwt.sign(payload, JWT_SECRET, JWT_TIME ? { expiresIn: JWT_TIME } : {});
|
||
|
|
};
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Checks if a user has permission to perform an action on a resource.
|
||
|
|
* @param {string} userId - The ID of the user.
|
||
|
|
* @param {string} action - The action to check (e.g., GET, POST, PUT, DELETE).
|
||
|
|
* @param {string} endpoin - The endpoint of the attack
|
||
|
|
* @param {Array} userPermissions - The list of permissions assigned to the user.
|
||
|
|
* @returns {Promise<Object>} - Resolves with an object containing permission details.
|
||
|
|
*/
|
||
|
|
const checkPermission = (action, endpoint, userPermissions) => {
|
||
|
|
return new Promise((resolve, reject) => {
|
||
|
|
const hasPermission = userPermissions.some(
|
||
|
|
(permission) =>
|
||
|
|
permission.permission_action === action && permission.permission_endpoint === endpoint
|
||
|
|
);
|
||
|
|
|
||
|
|
if (hasPermission) {
|
||
|
|
resolve({ hasPermission: true });
|
||
|
|
} else {
|
||
|
|
reject(new Error(`Permission denied for ${action} on ${endpoint}`));
|
||
|
|
}
|
||
|
|
});
|
||
|
|
};
|
||
|
|
|
||
|
|
export {
|
||
|
|
getDataFromToken,
|
||
|
|
generateAccessToken,
|
||
|
|
checkPermission,
|
||
|
|
};
|