initial commit

fluxer_api/src/oauth/repositories/OAuth2TokenRepository.ts

@@ -0,0 +1,217 @@
+/*
+ * Copyright (C) 2026 Fluxer Contributors
+ *
+ * This file is part of Fluxer.
+ *
+ * Fluxer is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * Fluxer is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with Fluxer. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import type {ApplicationID, UserID} from '~/BrandedTypes';
+import {BatchBuilder, deleteOneOrMany, fetchMany, fetchOne, upsertOne} from '~/database/Cassandra';
+import type {
+	OAuth2AccessTokenByUserRow,
+	OAuth2AccessTokenRow,
+	OAuth2AuthorizationCodeRow,
+	OAuth2RefreshTokenByUserRow,
+	OAuth2RefreshTokenRow,
+} from '~/database/types/OAuth2Types';
+import {OAuth2AccessToken} from '~/models/OAuth2AccessToken';
+import {OAuth2AuthorizationCode} from '~/models/OAuth2AuthorizationCode';
+import {OAuth2RefreshToken} from '~/models/OAuth2RefreshToken';
+import {
+	OAuth2AccessTokens,
+	OAuth2AccessTokensByUser,
+	OAuth2AuthorizationCodes,
+	OAuth2RefreshTokens,
+	OAuth2RefreshTokensByUser,
+} from '~/Tables';
+import type {IOAuth2TokenRepository} from './IOAuth2TokenRepository';
+
+const SELECT_AUTHORIZATION_CODE = OAuth2AuthorizationCodes.selectCql({
+	where: OAuth2AuthorizationCodes.where.eq('code'),
+});
+
+const SELECT_ACCESS_TOKEN = OAuth2AccessTokens.selectCql({
+	where: OAuth2AccessTokens.where.eq('token_'),
+});
+
+const SELECT_ACCESS_TOKENS_BY_USER = OAuth2AccessTokensByUser.selectCql({
+	columns: ['token_'],
+	where: OAuth2AccessTokensByUser.where.eq('user_id'),
+});
+
+const SELECT_REFRESH_TOKEN = OAuth2RefreshTokens.selectCql({
+	where: OAuth2RefreshTokens.where.eq('token_'),
+});
+
+const SELECT_REFRESH_TOKENS_BY_USER = OAuth2RefreshTokensByUser.selectCql({
+	columns: ['token_'],
+	where: OAuth2RefreshTokensByUser.where.eq('user_id'),
+});
+
+export class OAuth2TokenRepository implements IOAuth2TokenRepository {
+	async createAuthorizationCode(data: OAuth2AuthorizationCodeRow): Promise<OAuth2AuthorizationCode> {
+		await upsertOne(OAuth2AuthorizationCodes.insert(data));
+		return new OAuth2AuthorizationCode(data);
+	}
+
+	async getAuthorizationCode(code: string): Promise<OAuth2AuthorizationCode | null> {
+		const row = await fetchOne<OAuth2AuthorizationCodeRow>(SELECT_AUTHORIZATION_CODE, {code});
+		return row ? new OAuth2AuthorizationCode(row) : null;
+	}
+
+	async deleteAuthorizationCode(code: string): Promise<void> {
+		await deleteOneOrMany(OAuth2AuthorizationCodes.deleteByPk({code}));
+	}
+
+	async createAccessToken(data: OAuth2AccessTokenRow): Promise<OAuth2AccessToken> {
+		const batch = new BatchBuilder();
+		batch.addPrepared(OAuth2AccessTokens.insert(data));
+
+		if (data.user_id !== null) {
+			batch.addPrepared(
+				OAuth2AccessTokensByUser.insert({
+					user_id: data.user_id,
+					token_: data.token_,
+				}),
+			);
+		}
+
+		await batch.execute();
+		return new OAuth2AccessToken(data);
+	}
+
+	async getAccessToken(token: string): Promise<OAuth2AccessToken | null> {
+		const row = await fetchOne<OAuth2AccessTokenRow>(SELECT_ACCESS_TOKEN, {token_: token});
+		return row ? new OAuth2AccessToken(row) : null;
+	}
+
+	async deleteAccessToken(token: string, _applicationId: ApplicationID, userId: UserID | null): Promise<void> {
+		const batch = new BatchBuilder();
+		batch.addPrepared(OAuth2AccessTokens.deleteByPk({token_: token}));
+
+		if (userId !== null) {
+			batch.addPrepared(OAuth2AccessTokensByUser.deleteByPk({user_id: userId, token_: token}));
+		}
+
+		await batch.execute();
+	}
+
+	async deleteAllAccessTokensForUser(userId: UserID): Promise<void> {
+		const tokens = await fetchMany<OAuth2AccessTokenByUserRow>(SELECT_ACCESS_TOKENS_BY_USER, {
+			user_id: userId,
+		});
+
+		if (tokens.length === 0) {
+			return;
+		}
+
+		const batch = new BatchBuilder();
+		for (const tokenRow of tokens) {
+			batch.addPrepared(OAuth2AccessTokens.deleteByPk({token_: tokenRow.token_}));
+			batch.addPrepared(OAuth2AccessTokensByUser.deleteByPk({user_id: userId, token_: tokenRow.token_}));
+		}
+		await batch.execute();
+	}
+
+	async createRefreshToken(data: OAuth2RefreshTokenRow): Promise<OAuth2RefreshToken> {
+		const batch = new BatchBuilder();
+		batch.addPrepared(OAuth2RefreshTokens.insert(data));
+		batch.addPrepared(
+			OAuth2RefreshTokensByUser.insert({
+				user_id: data.user_id,
+				token_: data.token_,
+			}),
+		);
+		await batch.execute();
+		return new OAuth2RefreshToken(data);
+	}
+
+	async getRefreshToken(token: string): Promise<OAuth2RefreshToken | null> {
+		const row = await fetchOne<OAuth2RefreshTokenRow>(SELECT_REFRESH_TOKEN, {token_: token});
+		return row ? new OAuth2RefreshToken(row) : null;
+	}
+
+	async deleteRefreshToken(token: string, _applicationId: ApplicationID, userId: UserID): Promise<void> {
+		const batch = new BatchBuilder();
+		batch.addPrepared(OAuth2RefreshTokens.deleteByPk({token_: token}));
+		batch.addPrepared(OAuth2RefreshTokensByUser.deleteByPk({user_id: userId, token_: token}));
+		await batch.execute();
+	}
+
+	async deleteAllRefreshTokensForUser(userId: UserID): Promise<void> {
+		const tokens = await fetchMany<OAuth2RefreshTokenByUserRow>(SELECT_REFRESH_TOKENS_BY_USER, {
+			user_id: userId,
+		});
+
+		if (tokens.length === 0) {
+			return;
+		}
+
+		const batch = new BatchBuilder();
+		for (const tokenRow of tokens) {
+			batch.addPrepared(OAuth2RefreshTokens.deleteByPk({token_: tokenRow.token_}));
+			batch.addPrepared(OAuth2RefreshTokensByUser.deleteByPk({user_id: userId, token_: tokenRow.token_}));
+		}
+		await batch.execute();
+	}
+
+	async listRefreshTokensForUser(userId: UserID): Promise<Array<OAuth2RefreshToken>> {
+		const tokenRefs = await fetchMany<OAuth2RefreshTokenByUserRow>(SELECT_REFRESH_TOKENS_BY_USER, {
+			user_id: userId,
+		});
+
+		if (tokenRefs.length === 0) {
+			return [];
+		}
+
+		const tokens: Array<OAuth2RefreshToken> = [];
+		for (const tokenRef of tokenRefs) {
+			const row = await fetchOne<OAuth2RefreshTokenRow>(SELECT_REFRESH_TOKEN, {token_: tokenRef.token_});
+			if (row) {
+				tokens.push(new OAuth2RefreshToken(row));
+			}
+		}
+		return tokens;
+	}
+
+	async deleteAllTokensForUserAndApplication(userId: UserID, applicationId: ApplicationID): Promise<void> {
+		const accessTokenRefs = await fetchMany<OAuth2AccessTokenByUserRow>(SELECT_ACCESS_TOKENS_BY_USER, {
+			user_id: userId,
+		});
+		const refreshTokenRefs = await fetchMany<OAuth2RefreshTokenByUserRow>(SELECT_REFRESH_TOKENS_BY_USER, {
+			user_id: userId,
+		});
+
+		const batch = new BatchBuilder();
+
+		for (const tokenRef of accessTokenRefs) {
+			const row = await fetchOne<OAuth2AccessTokenRow>(SELECT_ACCESS_TOKEN, {token_: tokenRef.token_});
+			if (row && row.application_id === applicationId) {
+				batch.addPrepared(OAuth2AccessTokens.deleteByPk({token_: tokenRef.token_}));
+				batch.addPrepared(OAuth2AccessTokensByUser.deleteByPk({user_id: userId, token_: tokenRef.token_}));
+			}
+		}
+
+		for (const tokenRef of refreshTokenRefs) {
+			const row = await fetchOne<OAuth2RefreshTokenRow>(SELECT_REFRESH_TOKEN, {token_: tokenRef.token_});
+			if (row && row.application_id === applicationId) {
+				batch.addPrepared(OAuth2RefreshTokens.deleteByPk({token_: tokenRef.token_}));
+				batch.addPrepared(OAuth2RefreshTokensByUser.deleteByPk({user_id: userId, token_: tokenRef.token_}));
+			}
+		}
+
+		await batch.execute();
+	}
+}