Compare commits

..

No commits in common. "6306a4457d3e27008dcd611da223a567feebf3be" and "d30f92aa46c4027be692bb3c0e95900ecefec430" have entirely different histories.

3 changed files with 65 additions and 57 deletions

View file

@ -57,10 +57,10 @@ FFTCGDB::close = ->
@db.close (err) ->
if err
logger.error "Error closing: '#{err.message}'"
reject 'db'
resolve 'ok'
else
logger.warn "Closed '#{@filename}'"
resolve 'ok'
reject 'db'
FFTCGDB::register = (login, password) ->
that = @

View file

@ -1,11 +1,10 @@
# node libraries
#(require 'debug').enable 'routes'
logger = (require 'logging').default 'routes'
path = (require 'path')
# my libraries
FFTCGDB = (require './db')
FFTCGSESSION = (require './session')
logger = (require 'logging').default 'routes'
# open fftcg.db (persistent data)
fftcgdb = new FFTCGDB path.resolve(__dirname, 'fftcg.db'), true
@ -48,35 +47,29 @@ module.exports = [
url: '/user/login'
method: 'POST'
handler: (request, reply) ->
session_id = request.cookies.session ? ''
session_id = request.cookies.session
logger.info session_id
session.action session_id
.then (user) ->
logger.info user
.catch (err) ->
logger.error err
new Promise (resolve, reject) ->
session.check session_id
.then (user) ->
logger.debug "user '#{user.login}' resumed session '#{session_id}'"
resolve user
fftcgdb.login request.body.login, request.body.password
.then (user) ->
# login successful
reply.setCookie 'user', JSON.stringify user
.catch ->
fftcgdb.login request.body.login, request.body.password
.then (user) ->
# login successful: start new session
session.start user
.then (session_id) ->
logger.debug "user '#{user.login}' logged into session '#{session_id}'"
reply.setCookie 'session', session_id
resolve user
# return JSON status
reply.send
status: 'ok'
user: user.user
login: user.login
.catch (err) ->
logger.info "failed login for '#{request.body.login}'"
# login failed
reply.send
status: 'fail'
msg: err
.then (user) ->
# user is logged in
reply.send
status: 'ok'
user: user
.catch (err) ->
# login failed
reply.send
status: 'fail'
text: err
,
]

View file

@ -4,48 +4,63 @@ crypto = (require 'crypto')
logger = (require 'logging').default 'session'
# expiry times in seconds
TIMES =
minute: 60
hour: 60 * 60
day: 60 * 60 * 24
week: 60 * 60 * 24 * 7
month: 60 * 60 * 24 * 7 * 4
EXPIRY =
# games expire 1 week after last action
game: 1 * 60 * 60 * 24 * 7
game: 1 * TIMES.week
# logins expire 1 month after last action
login: 1 * 60 * 60 * 24 * 7 * 4
login: 1 * TIMES.month
FFTCGSESSION = () ->
@db = redis.createClient
host: 'redis'
port: 6379
@db = redis.createClient 6379, 'redis'
@db.on 'error', (err) ->
logger.error err.message
return
FFTCGSESSION::start = (data) ->
that = @
new Promise (resolve) ->
# hash data
hmac = crypto.createHmac 'sha256', Math.random().toString()
hmac.update (JSON.stringify data)
digest = hmac.digest 'base64'
logger.debug 'digest', digest
# push (hash, data) into DB for the configured timespan
that.db.setex digest, EXPIRY.login, (JSON.stringify data), (err) ->
resolve digest
FFTCGSESSION::check = (digest) ->
FFTCGSESSION::login = (login) ->
that = @
new Promise (resolve, reject) ->
# refresh expiry timer on digest
that.db.expire digest, EXPIRY.login, (err, res) ->
if res == 0
reject null
hmac = crypto.createHmac 'sha256', Math.random().toString()
hmac.update login
digest = hmac.digest 'hex'
that.db.setex digest, EXPIRY.login, login, (err) ->
if err
reject err
else
that.db.get digest, (err, res) ->
resolve JSON.parse res
resolve digest
FFTCGSESSION::action = (digest) ->
that = @
new Promise (resolve, reject) ->
that.db.get digest (err, res) ->
logger.info 'err', err, 'res', res
if err
reject err
else if res == 0
resolve null
else
that.db.expire digest, EXPIRY.login, (err, res) ->
if err
reject err
else
resolve res
module.exports = FFTCGSESSION