gitoria

3.0 KB

1. // lib/tokens.hl — ACCESS TOKENS for git over HTTPS (ticket gitoria#7; docs/git-backend.md "Credentials"). A developer's
2. // git client cannot do the ident login, so a logged-in user makes a token here and gives it to git as the PASSWORD
3. // (the user name is ignored). Git's HTTP Basic login is not deprecated by git itself; GitHub's ban on account
4. // passwords is GitHub's. Only the sha256 of a token is stored: the token is shown ONCE, at its creation.
5. // tokensTable pk @id index !hash, user { user (users @id), name, hash, created } storage/mpackdb/tokens.db
6. // A token is `gtr_` + 40 hex characters from the kernel's random source (160 bits — the fast sha256 is enough).
7. import { MPackDB } from 'hl:mpackdb'
8. import { now } from 'hl:time'
9. import { randomBytes, sha256 } from 'hl:crypto'
10. import { storageDir, countOfList, firstOf, plainError, isHex, newestFirst, localStamp } from './util.hl'
11. import { userRecord } from './users.hl'
13. static tokensTable = new MPackDB(file = storageDir + '/tokens.db', primaryKey = '@id', indexes = ['!hash', 'user'])
14. static maxTokens = 20
16. static rowOfToken = (t) => { return { id = t.id name = t.name created = localStamp(t.created) createdMs = t.created } }
18. // a user's tokens, newest first — never the token itself, only what identifies it to the owner
19. static tokenRows = (userId) => {
20. out = []
21. all = tokensTable.find('user', userId)
22. if (countOfList(all) == 0) { return out }
23. for (t of all) { out.push(rowOfToken(t)) }
24. return newestFirst(out)
25. }
27. // a new token: { token (the secret, this once), row } or { error }
28. static createToken = (userId, name) => {
29. u = userRecord(userId)
30. if (u == null) { return { error = 'log in with ident (top right) first' } }
31. n = name == null ? '' : ('' + name).trim()
32. bad = plainError(n, 60, 'the token name')
33. if (bad != null) { return { error = bad } }
34. if (n == '') { return { error = 'give the token a name (for example the computer it is for)' } }
35. if (countOfList(tokensTable.find('user', u.id)) >= maxTokens) { return { error = 'you have ' + maxTokens + ' tokens already — remove one first' } }
36. secret = 'gtr_' + randomBytes(20, 'hex')
37. id = tokensTable.put({ user = u.id name = n hash = sha256(secret) created = now() })
38. if (id == null) { return { error = 'could not store the token: ' + tokensTable.lastError() } }
39. return { token = secret row = rowOfToken(tokensTable.fetch(id)) }
40. }
42. // remove one of the user's own tokens
43. static revokeToken = (userId, tokenId) => {
44. if (userId == null || tokenId == null || hlTypeName(tokenId) != 'String') { return { error = 'no such token' } }
45. t = tokensTable.fetch(tokenId)
46. if (t == null || t.user != userId) { return { error = 'no such token' } }
47. tokensTable.delete(tokenId)
48. return { ok = true }
49. }
51. // the user a token belongs to (users @id) or null; anything that is not shaped like a token is null without a lookup
52. static userOfToken = (secret) => {
53. if (secret == null || hlTypeName(secret) != 'String' || secret.length != 44 || !secret.startsWith('gtr_') || !isHex(secret.slice(4), 40)) { return null }
54. t = firstOf(tokensTable.find('hash', sha256(secret)))
55. return t == null ? null : t.user
56. }