1
- import { connect , dbSelect , dbUpdate } from "../lib/database.js" ;
1
+ import { dbSelect , dbUpdate } from "../lib/database.js" ;
2
2
import { logger } from "./logger.js" ;
3
3
import { credentialTypes } from "../interfaces/admin.js" ;
4
4
import { registeredTableFields } from "../interfaces/database.js" ;
@@ -23,23 +23,18 @@ const isPubkeyValid = async (req: Request, checkAdminPrivileges :boolean = false
23
23
return false ;
24
24
}
25
25
26
- let pubkey = req . body . pubkey || req . session . identifier ;
27
-
26
+ const pubkey = req . body . pubkey || req . session . identifier ;
28
27
logger . info ( "Checking if pubkey is allowed ->" , pubkey )
29
28
30
- const conn = await connect ( "IsAuthorizedPubkey" ) ;
31
-
32
29
let queryString : string = "SELECT hex FROM registered WHERE hex = ?" ;
33
30
if ( checkAdminPrivileges ) queryString = "SELECT hex FROM registered WHERE allowed = 1 and hex = ?" ;
34
31
try {
35
32
36
- let result = await dbSelect ( queryString , "hex" , [ pubkey ] , registeredTableFields )
33
+ const result = await dbSelect ( queryString , "hex" , [ pubkey ] , registeredTableFields )
37
34
if ( result == "" ) {
38
35
return false ;
39
36
}
40
-
41
37
if ( req . session . identifier ) return true ;
42
-
43
38
return await verifyNIP07login ( req ) ;
44
39
45
40
} catch ( error ) {
@@ -56,7 +51,7 @@ const isPubkeyValid = async (req: Request, checkAdminPrivileges :boolean = false
56
51
*/
57
52
const isUserPasswordValid = async ( username :string , password :string ) : Promise < boolean > => {
58
53
try {
59
- let userDBPassword = await dbSelect ( "SELECT password FROM registered WHERE username = ?" ,
54
+ const userDBPassword = await dbSelect ( "SELECT password FROM registered WHERE username = ?" ,
60
55
"password" ,
61
56
[ username ] ,
62
57
registeredTableFields )
@@ -81,9 +76,9 @@ const checkAuthkey = async (req: Request) : Promise<boolean> =>{
81
76
logger . warn ( "Unauthorized request, no authorization header" ) ;
82
77
return false
83
78
}
84
- let hashedAuthkey = await hashString ( req . headers . authorization , 'authkey' ) ;
79
+ const hashedAuthkey = await hashString ( req . headers . authorization , 'authkey' ) ;
85
80
try {
86
- let hex = await dbSelect ( "SELECT hex FROM registered WHERE authkey = ? and allowed = ?" , "hex" , [ hashedAuthkey , "1" ] , registeredTableFields )
81
+ const hex = await dbSelect ( "SELECT hex FROM registered WHERE authkey = ? and allowed = ?" , "hex" , [ hashedAuthkey , "1" ] , registeredTableFields )
87
82
if ( hex == "" ) {
88
83
logger . warn ( "Unauthorized request, authkey not found" )
89
84
return false ; }
@@ -118,7 +113,7 @@ const generateCredentials = async (type: credentialTypes, returnHashed: boolean
118
113
try {
119
114
120
115
const credential = crypto . randomBytes ( 20 ) . toString ( 'hex' ) ;
121
- let hashedCredential = await hashString ( credential , type ) ;
116
+ const hashedCredential = await hashString ( credential , type ) ;
122
117
const update = await dbUpdate ( "registered" , type , hashedCredential , "hex" , pubkey ) ;
123
118
if ( update ) {
124
119
logger . debug ( "New credential generated and saved to database" ) ;
0 commit comments