mirror of
https://github.com/hanzoai/sign.git
synced 2026-10-21 01:21:51 +00:00
zooqueen
fb4e3df0e3
The product is branded Hanzo eSign (esign.hanzo.ai, repo hanzoai/esign). Rename all workspace packages @hanzo/sign-* → @hanzo/esign-* (1052 files) and align docker/Dockerfile turbo --scope/--filter to the actual remix package name @hanzo/esign (was a pre-existing mismatch with -remix that broke the build). Protected deps (@hanzo/insights, @hanzo/logo) untouched.
115 lines
2.8 KiB
TypeScript
115 lines
2.8 KiB
TypeScript
import { sValidator } from '@hono/standard-validator';
|
|
import { Hono } from 'hono';
|
|
import { z } from 'zod';
|
|
|
|
import { prisma } from '@hanzo/esign-prisma';
|
|
|
|
import { invalidateSessions, validateSessionToken } from '../lib/session/session';
|
|
import { deleteSessionCookie, getSessionCookie } from '../lib/session/session-cookies';
|
|
import type { HonoAuthContext } from '../types/context';
|
|
|
|
const ZSignoutSessionSchema = z.object({
|
|
sessionId: z.string().trim().min(1),
|
|
});
|
|
|
|
export const signOutRoute = new Hono<HonoAuthContext>()
|
|
.post('/signout', async (c) => {
|
|
const metadata = c.get('requestMetadata');
|
|
|
|
const sessionToken = await getSessionCookie(c);
|
|
|
|
if (!sessionToken) {
|
|
return new Response('No session found', { status: 401 });
|
|
}
|
|
|
|
const { session } = await validateSessionToken(sessionToken);
|
|
|
|
if (!session) {
|
|
deleteSessionCookie(c);
|
|
return new Response('No session found', { status: 401 });
|
|
}
|
|
|
|
await invalidateSessions({
|
|
userId: session.userId,
|
|
sessionIds: [session.id],
|
|
metadata,
|
|
isRevoke: false,
|
|
});
|
|
|
|
deleteSessionCookie(c);
|
|
|
|
return c.status(200);
|
|
})
|
|
.post('/signout-all', async (c) => {
|
|
const metadata = c.get('requestMetadata');
|
|
|
|
const sessionToken = await getSessionCookie(c);
|
|
|
|
if (!sessionToken) {
|
|
return new Response('No session found', { status: 401 });
|
|
}
|
|
|
|
const { session } = await validateSessionToken(sessionToken);
|
|
|
|
if (!session) {
|
|
deleteSessionCookie(c);
|
|
return new Response('No session found', { status: 401 });
|
|
}
|
|
|
|
const userId = session.userId;
|
|
|
|
const userSessionIds = await prisma.session
|
|
.findMany({
|
|
where: {
|
|
userId,
|
|
id: {
|
|
not: session.id,
|
|
},
|
|
},
|
|
select: {
|
|
id: true,
|
|
},
|
|
})
|
|
.then((sessions) => sessions.map((session) => session.id));
|
|
|
|
await invalidateSessions({
|
|
userId,
|
|
sessionIds: userSessionIds,
|
|
metadata,
|
|
isRevoke: true,
|
|
});
|
|
|
|
return c.status(200);
|
|
})
|
|
.post('/signout-session', sValidator('json', ZSignoutSessionSchema), async (c) => {
|
|
const metadata = c.get('requestMetadata');
|
|
|
|
const { sessionId: sessionIdToRevoke } = c.req.valid('json');
|
|
|
|
const sessionToken = await getSessionCookie(c);
|
|
|
|
if (!sessionToken) {
|
|
return new Response('No session found', { status: 401 });
|
|
}
|
|
|
|
const { session } = await validateSessionToken(sessionToken);
|
|
|
|
if (!session) {
|
|
deleteSessionCookie(c);
|
|
return new Response('No session found', { status: 401 });
|
|
}
|
|
|
|
await invalidateSessions({
|
|
userId: session.userId,
|
|
sessionIds: [sessionIdToRevoke],
|
|
metadata,
|
|
isRevoke: true,
|
|
});
|
|
|
|
if (session.id === sessionIdToRevoke) {
|
|
deleteSessionCookie(c);
|
|
}
|
|
|
|
return c.status(200);
|
|
});
|