mirror of
https://github.com/hanzoai/sign.git
synced 2026-10-21 01:21:51 +00:00
zooqueen
fb4e3df0e3
The product is branded Hanzo eSign (esign.hanzo.ai, repo hanzoai/esign). Rename all workspace packages @hanzo/sign-* → @hanzo/esign-* (1052 files) and align docker/Dockerfile turbo --scope/--filter to the actual remix package name @hanzo/esign (was a pre-existing mismatch with -remix that broke the build). Protected deps (@hanzo/insights, @hanzo/logo) untouched.
45 lines
1.0 KiB
TypeScript
45 lines
1.0 KiB
TypeScript
import { prisma } from '@hanzo/esign-prisma';
|
|
|
|
import { AppError, AppErrorCode } from '../../errors/app-error';
|
|
import { hashString } from '../auth/hash';
|
|
|
|
export const getUserByApiToken = async ({ token }: { token: string }) => {
|
|
const hashedToken = hashString(token);
|
|
|
|
const user = await prisma.user.findFirst({
|
|
where: {
|
|
apiTokens: {
|
|
some: {
|
|
token: hashedToken,
|
|
},
|
|
},
|
|
},
|
|
include: {
|
|
apiTokens: true,
|
|
},
|
|
});
|
|
|
|
if (!user) {
|
|
throw new AppError(AppErrorCode.UNAUTHORIZED, {
|
|
message: 'Invalid token',
|
|
statusCode: 401,
|
|
});
|
|
}
|
|
|
|
const retrievedToken = user.apiTokens.find((apiToken) => apiToken.token === hashedToken);
|
|
|
|
// This should be impossible but we need to satisfy TypeScript
|
|
if (!retrievedToken) {
|
|
throw new AppError(AppErrorCode.UNAUTHORIZED, {
|
|
message: 'Invalid token',
|
|
statusCode: 401,
|
|
});
|
|
}
|
|
|
|
if (retrievedToken.expires && retrievedToken.expires < new Date()) {
|
|
throw new Error('Expired token');
|
|
}
|
|
|
|
return user;
|
|
};
|