55 lines
1.3 KiB
JavaScript
55 lines
1.3 KiB
JavaScript
|
const express = require('express');
|
||
|
const jwtdecode = require('../../lib/express/jwt-decode');
|
||
|
const internalToken = require('../../internal/token');
|
||
|
const apiValidator = require('../../lib/validator/api');
|
||
|
|
||
|
let router = express.Router({
|
||
|
caseSensitive: true,
|
||
|
strict: true,
|
||
|
mergeParams: true
|
||
|
});
|
||
|
|
||
|
router
|
||
|
.route('/')
|
||
|
.options((req, res) => {
|
||
|
res.sendStatus(204);
|
||
|
})
|
||
|
|
||
|
/**
|
||
|
* GET /tokens
|
||
|
*
|
||
|
* Get a new Token, given they already have a token they want to refresh
|
||
|
* We also piggy back on to this method, allowing admins to get tokens
|
||
|
* for services like Job board and Worker.
|
||
|
*/
|
||
|
.get(jwtdecode(), (req, res, next) => {
|
||
|
internalToken.getFreshToken(res.locals.access, {
|
||
|
expiry: (typeof req.query.expiry !== 'undefined' ? req.query.expiry : null),
|
||
|
scope: (typeof req.query.scope !== 'undefined' ? req.query.scope : null)
|
||
|
})
|
||
|
.then((data) => {
|
||
|
res.status(200)
|
||
|
.send(data);
|
||
|
})
|
||
|
.catch(next);
|
||
|
})
|
||
|
|
||
|
/**
|
||
|
* POST /tokens
|
||
|
*
|
||
|
* Create a new Token
|
||
|
*/
|
||
|
.post((req, res, next) => {
|
||
|
apiValidator({$ref: 'endpoints/tokens#/links/0/schema'}, req.body)
|
||
|
.then((payload) => {
|
||
|
return internalToken.getTokenFromEmail(payload);
|
||
|
})
|
||
|
.then((data) => {
|
||
|
res.status(200)
|
||
|
.send(data);
|
||
|
})
|
||
|
.catch(next);
|
||
|
});
|
||
|
|
||
|
module.exports = router;
|