feat: fetch from db auth secret

This commit is contained in:
José Oliveira 2021-11-20 20:20:16 +00:00
parent 8884c75ffd
commit bca6e15356

View file

@ -1,32 +1,22 @@
const fs = require('fs')
const express = require('express') const express = require('express')
const router = express.Router() const router = express.Router()
const hkdf = require('futoin-hkdf')
const session = require('express-session') const session = require('express-session')
const PgSession = require('connect-pg-simple')(session) const PgSession = require('connect-pg-simple')(session)
const mnemonicHelpers = require('../../mnemonic-helpers')
const db = require('../../db') const db = require('../../db')
const options = require('../../options') const options = require('../../options')
const { USER_SESSIONS_TABLE_NAME } = require('../../constants') const { USER_SESSIONS_TABLE_NAME } = require('../../constants')
const { getOperatorId } = require('../../operator')
const getSecret = () => {
const mnemonic = fs.readFileSync(options.mnemonicPath, 'utf8')
return hkdf(
mnemonicHelpers.toEntropyBuffer(mnemonic),
16,
{ info: 'operator-id' }
).toString('hex')
}
const hostname = options.hostname const hostname = options.hostname
router.use('*', session({ router.use('*', async () => {
return getOperatorId('authentication').then(secret => session({
store: new PgSession({ store: new PgSession({
pgPromise: db, pgPromise: db,
tableName: USER_SESSIONS_TABLE_NAME tableName: USER_SESSIONS_TABLE_NAME
}), }),
name: 'lamassu_sid', name: 'lamassu_sid',
secret: getSecret(), secret: secret,
resave: false, resave: false,
saveUninitialized: false, saveUninitialized: false,
cookie: { cookie: {
@ -37,5 +27,6 @@ router.use('*', session({
maxAge: 60 * 10 * 1000 // 10 minutes maxAge: 60 * 10 * 1000 // 10 minutes
} }
})) }))
})
module.exports = router module.exports = router