make Timeout time clearer

This commit is contained in:
Mystikfluu 2023-04-02 20:35:39 +02:00
parent 93ab117f13
commit 1ab0379b64

View File

@ -20,7 +20,7 @@ export const setup = function (router, con, server) {
if(typeof appid === "number") { if(typeof appid === "number") {
const token = randomBytes(150).toString("base64") const token = randomBytes(150).toString("base64")
let tokencode; let tokencode;
while(tokencode===undefined || temp_code_to_token[tokencode]!==undefined) { while(tokencode===undefined || temp_code_to_token[tokencode]!==undefined) {
tokencode = randomBytes(15).toString("base64").replaceAll("/","f").replaceAll("+","A") //"/" and "+" may break some apps tokencode = randomBytes(15).toString("base64").replaceAll("/","f").replaceAll("+","A") //"/" and "+" may break some apps
@ -35,7 +35,7 @@ export const setup = function (router, con, server) {
if(data !== undefined && data.token===token && data.appid === appid && data.userid === res.locals.userid) { if(data !== undefined && data.token===token && data.appid === appid && data.userid === res.locals.userid) {
temp_code_to_token[tokencode]=undefined temp_code_to_token[tokencode]=undefined
} }
}, 300000); //wait for 5 minutes }, 1000*60*5);
const sql = "SELECT application_auth_url FROM ipost.application where application_id=?" const sql = "SELECT application_auth_url FROM ipost.application where application_id=?"
@ -52,8 +52,8 @@ export const setup = function (router, con, server) {
res.redirect(`${result[0].application_auth_url}?code=${tokencode}${extra}`) res.redirect(`${result[0].application_auth_url}?code=${tokencode}${extra}`)
}) })
return return
} }
} }
@ -75,12 +75,12 @@ export const setup = function (router, con, server) {
} catch(err) { } catch(err) {
console.log("error parsing",err) console.log("error parsing",err)
} }
} }
if( if(
typeof req.body.auth !== "object" || typeof req.body.auth !== "object" ||
typeof req.body.auth.secret !== "string" || typeof req.body.auth.secret !== "string" ||
typeof req.body.auth.appid !== "number" || typeof req.body.auth.appid !== "number" ||
req.body.auth.secret.length !== 200 || req.body.auth.secret.length !== 200 ||
Buffer.from(req.body.auth.secret,"base64").length !== 150 || Buffer.from(req.body.auth.secret,"base64").length !== 150 ||
req.body.auth.appid !== temp_code_to_token[req.body.authcode].appid req.body.auth.appid !== temp_code_to_token[req.body.authcode].appid
) { ) {
@ -106,10 +106,10 @@ export const setup = function (router, con, server) {
let data = temp_code_to_token[req.body.authcode] let data = temp_code_to_token[req.body.authcode]
temp_code_to_token[req.body.authcode] = undefined temp_code_to_token[req.body.authcode] = undefined
const sql = "INSERT INTO `ipost`.`auth_tokens`(`auth_token`,`auth_token_u_id`,`auth_token_isfrom_application_id`) VALUES(?,?,?);" const sql = "INSERT INTO `ipost`.`auth_tokens`(`auth_token`,`auth_token_u_id`,`auth_token_isfrom_application_id`) VALUES(?,?,?);"
const values = [SHA256(data.token,appid,10000),data.userid,data.appid] //token,id,appid const values = [SHA256(data.token,appid,10000),data.userid,data.appid] //token,id,appid
con.query(sql,values,(err,result) => { con.query(sql,values,(err,result) => {
if(err) { if(err) {
@ -121,7 +121,7 @@ export const setup = function (router, con, server) {
}) })
}) })
}) })
} }