Files
authorizer/server/resolvers/verify_email.go

113 lines
3.5 KiB
Go
Raw Normal View History

package resolvers
import (
"context"
"fmt"
"strings"
"time"
2022-05-24 12:42:29 +05:30
log "github.com/sirupsen/logrus"
2022-06-12 00:27:21 +05:30
"github.com/authorizerdev/authorizer/server/constants"
"github.com/authorizerdev/authorizer/server/cookie"
2021-07-23 21:57:44 +05:30
"github.com/authorizerdev/authorizer/server/db"
"github.com/authorizerdev/authorizer/server/db/models"
2021-07-23 21:57:44 +05:30
"github.com/authorizerdev/authorizer/server/graph/model"
2022-05-27 23:20:38 +05:30
"github.com/authorizerdev/authorizer/server/memorystore"
2022-05-30 11:54:16 +05:30
"github.com/authorizerdev/authorizer/server/parsers"
"github.com/authorizerdev/authorizer/server/token"
2021-07-23 21:57:44 +05:30
"github.com/authorizerdev/authorizer/server/utils"
)
2022-01-17 11:32:13 +05:30
// VerifyEmailResolver is a resolver for verify email mutation
func VerifyEmailResolver(ctx context.Context, params model.VerifyEmailInput) (*model.AuthResponse, error) {
var res *model.AuthResponse
2022-05-24 12:42:29 +05:30
gc, err := utils.GinContextFromContext(ctx)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to get GinContext: ", err)
return res, err
}
2022-01-21 13:34:04 +05:30
verificationRequest, err := db.Provider.GetVerificationRequestByToken(params.Token)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to get verification request by token: ", err)
2022-02-28 07:55:01 +05:30
return res, fmt.Errorf(`invalid token: %s`, err.Error())
}
// verify if token exists in db
2022-05-30 11:54:16 +05:30
hostname := parsers.GetHost(gc)
2022-06-11 19:10:39 +05:30
claim, err := token.ParseJWTToken(params.Token)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to parse token: ", err)
2022-02-28 07:55:01 +05:30
return res, fmt.Errorf(`invalid token: %s`, err.Error())
}
2022-06-11 19:10:39 +05:30
if ok, err := token.ValidateJWTClaims(claim, hostname, verificationRequest.Nonce, verificationRequest.Email); !ok || err != nil {
log.Debug("Failed to validate jwt claims: ", err)
return res, fmt.Errorf(`invalid token: %s`, err.Error())
}
2022-05-24 12:42:29 +05:30
email := claim["sub"].(string)
log := log.WithFields(log.Fields{
"email": email,
})
user, err := db.Provider.GetUserByEmail(email)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to get user by email: ", err)
return res, err
}
// update email_verified_at in users table
now := time.Now().Unix()
user.EmailVerifiedAt = &now
2022-03-02 17:42:31 +05:30
user, err = db.Provider.UpdateUser(user)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to update user: ", err)
2022-03-02 17:42:31 +05:30
return res, err
}
// delete from verification table
2022-03-02 17:42:31 +05:30
err = db.Provider.DeleteVerificationRequest(verificationRequest)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to delete verification request: ", err)
2022-03-02 17:42:31 +05:30
return res, err
}
roles := strings.Split(user.Roles, ",")
2022-03-02 17:42:31 +05:30
scope := []string{"openid", "email", "profile"}
authToken, err := token.CreateAuthToken(gc, user, roles, scope)
if err != nil {
2022-05-25 12:30:22 +05:30
log.Debug("Failed to create auth token: ", err)
return res, err
}
go db.Provider.AddSession(models.Session{
UserID: user.ID,
UserAgent: utils.GetUserAgent(gc.Request),
IP: utils.GetIP(gc.Request),
})
2022-03-02 17:42:31 +05:30
expiresIn := authToken.AccessToken.ExpiresAt - time.Now().Unix()
if expiresIn <= 0 {
expiresIn = 1
}
res = &model.AuthResponse{
Message: `Email verified successfully.`,
AccessToken: &authToken.AccessToken.Token,
2022-03-02 17:42:31 +05:30
IDToken: &authToken.IDToken.Token,
ExpiresIn: &expiresIn,
User: user.AsAPIUser(),
}
2022-06-12 00:27:21 +05:30
cookie.SetSession(gc, authToken.FingerPrintHash)
memorystore.Provider.SetUserSession(user.ID, constants.TokenTypeSessionToken+"_"+authToken.FingerPrint, authToken.FingerPrintHash)
memorystore.Provider.SetUserSession(user.ID, constants.TokenTypeAccessToken+"_"+authToken.FingerPrint, authToken.AccessToken.Token)
if authToken.RefreshToken != nil {
res.RefreshToken = &authToken.RefreshToken.Token
memorystore.Provider.SetUserSession(user.ID, constants.TokenTypeRefreshToken+"_"+authToken.FingerPrint, authToken.RefreshToken.Token)
}
return res, nil
}