UNPKG

@lucidcms/core

Version:

The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.

1 lines 3.54 kB
{"version":3,"file":"revoke-refresh-tokens.mjs","names":["accountServices.revokeAllRefreshTokens","authServices.refreshToken.clearToken","constants","authServices.accessToken.clearToken","authServices.csrf.clearToken"],"sources":["../../../../../src/libs/http/controllers/account/revoke-refresh-tokens.ts"],"sourcesContent":["import { createFactory } from \"hono/factory\";\nimport { describeRoute } from \"hono-openapi\";\nimport constants from \"../../../../constants/constants.js\";\nimport { accountServices, authServices } from \"../../../../services/index.js\";\nimport { LucidAPIError } from \"../../../../utils/errors/index.js\";\nimport serviceWrapper from \"../../../../utils/services/service-wrapper.js\";\nimport { copy } from \"../../../i18n/index.js\";\nimport authenticate from \"../../middleware/authenticate.js\";\nimport validateCSRF from \"../../middleware/validate-csrf.js\";\nimport openAPI from \"../../openapi/index.js\";\nimport createServiceContext from \"../../utils/create-service-context.js\";\n\nconst factory = createFactory();\n\nconst revokeRefreshTokensController = factory.createHandlers(\n\tdescribeRoute({\n\t\tdescription:\n\t\t\t\"Revoke all refresh tokens for the authenticated user and clear the current auth session.\",\n\t\ttags: [\"account\"],\n\t\tsummary: \"Revoke All Authenticated User Refresh Tokens\",\n\t\tresponses: openAPI.responses(),\n\t\tparameters: openAPI.parameters({\n\t\t\theaders: {\n\t\t\t\tcsrf: true,\n\t\t\t},\n\t\t}),\n\t}),\n\tvalidateCSRF,\n\tauthenticate(),\n\tasync (c) => {\n\t\tconst context = createServiceContext(c);\n\t\tconst auth = c.get(\"auth\");\n\n\t\tconst revokeAllRes = await serviceWrapper(\n\t\t\taccountServices.revokeAllRefreshTokens,\n\t\t\t{\n\t\t\t\ttransaction: false,\n\t\t\t\tdefaultError: {\n\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\tname: copy(\"server:core.routes.user.me.update.error.name\"),\n\t\t\t\t\tmessage: copy(\"server:core.routes.user.me.update.error.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t)(context, {\n\t\t\tuserId: auth.id,\n\t\t});\n\t\tif (revokeAllRes.error) throw new LucidAPIError(revokeAllRes.error);\n\n\t\tconst [refreshRes, accessRes, csrfRes] = await Promise.all([\n\t\t\tauthServices.refreshToken.clearToken(c, {\n\t\t\t\trevokeReason: constants.refreshTokenRevokeReasons.accountRevokeAll,\n\t\t\t}),\n\t\t\tauthServices.accessToken.clearToken(c),\n\t\t\tauthServices.csrf.clearToken(c),\n\t\t]);\n\t\tif (refreshRes.error) throw new LucidAPIError(refreshRes.error);\n\t\tif (accessRes.error) throw new LucidAPIError(accessRes.error);\n\t\tif (csrfRes.error) throw new LucidAPIError(csrfRes.error);\n\n\t\tc.status(204);\n\t\treturn c.body(null);\n\t},\n);\n\nexport default revokeRefreshTokensController;\n"],"mappings":"0wBAcA,MAAM,EAFU,EAE4B,CAAC,CAAC,eAC7C,EAAc,CACb,YACC,2FACD,KAAM,CAAC,SAAS,EAChB,QAAS,+CACT,UAAW,EAAQ,UAAU,EAC7B,WAAY,EAAQ,WAAW,CAC9B,QAAS,CACR,KAAM,EACP,CACD,CAAC,CACF,CAAC,EACD,EACA,EAAa,EACb,KAAO,IAAM,CACZ,IAAM,EAAU,EAAqB,CAAC,EAChC,EAAO,EAAE,IAAI,MAAM,EAEnB,EAAe,MAAM,EAC1BA,EACA,CACC,YAAa,GACb,aAAc,CACb,KAAM,QACN,KAAM,EAAK,8CAA8C,EACzD,QAAS,EAAK,iDAAiD,CAChE,CACD,CACD,CAAC,CAAC,EAAS,CACV,OAAQ,EAAK,EACd,CAAC,EACD,GAAI,EAAa,MAAO,MAAM,IAAI,EAAc,EAAa,KAAK,EAElE,GAAM,CAAC,EAAY,EAAW,GAAW,MAAM,QAAQ,IAAI,CAC1DC,EAAqC,EAAG,CACvC,aAAcC,EAAU,0BAA0B,gBACnD,CAAC,EACDC,EAAoC,CAAC,EACrCC,EAA6B,CAAC,CAC/B,CAAC,EACD,GAAI,EAAW,MAAO,MAAM,IAAI,EAAc,EAAW,KAAK,EAC9D,GAAI,EAAU,MAAO,MAAM,IAAI,EAAc,EAAU,KAAK,EAC5D,GAAI,EAAQ,MAAO,MAAM,IAAI,EAAc,EAAQ,KAAK,EAGxD,OADA,EAAE,OAAO,GAAG,EACL,EAAE,KAAK,IAAI,CACnB,CACD"}