misty.cafe/mistykey
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

pass client token through API via caller ID

Browse source
This commit is contained in:
Hazelnoot 2025-06-22 15:34:52 -04:00
parent 2e61fafe57
commit df750a6b65
5 changed files with 85 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

13
packages/backend/src/server/api/AuthenticateService.ts
View file

@ -13,6 +13,7 @@ import type { MiApp } from '@/models/App.js';
import { CacheService } from '@/core/CacheService.js';
import { isNativeUserToken } from '@/misc/token.js';
import { bindThis } from '@/decorators.js';
import { attachCallerId } from '@/misc/attach-caller-id.js';
export class AuthenticationError extends Error {
constructor(message: string) {
@ -62,6 +63,9 @@ export class AuthenticateService implements OnApplicationShutdown {
}, {
token: token, // miauth
}],
relations: {
user: true,
},
});
if (accessToken == null) {
@ -72,10 +76,11 @@ export class AuthenticateService implements OnApplicationShutdown {
lastUsedAt: new Date(),
});
const user = await this.cacheService.localUserByIdCache.fetch(accessToken.userId,
() => this.usersRepository.findOneBy({
id: accessToken.userId,
}) as Promise<MiLocalUser>);
// Loaded by relation above
const user = accessToken.user as MiLocalUser;
// Attach token to user - this will be read by RoleService to drop admin/moderator permissions.
attachCallerId(user, { accessToken });
if (accessToken.appId) {
const app = await this.appCache.fetch(accessToken.appId,