dan/Portfolio
1
0
Fork 0
mirror of https://github.com/danbulant/Portfolio synced 2026-05-24 12:35:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: revoke all candidate sessions on password reset

Browse source
This commit is contained in:
Sebastian Pravda 2022-11-17 20:00:40 +01:00
parent 2ccbba4e11
commit 315966acba
No known key found for this signature in database
GPG key ID: F3BC84F08EFA3F57
2 changed files with 9 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
core/src/services/candidate_service.rs
View file

@ -118,7 +118,9 @@ impl CandidateService {
let encrypted_priv_key = crypto::encrypt_password(priv_key_plain_text,
new_password_plain.to_string()
).await?;
SessionService::revoke_all_sessions(db, Some(id), None).await?;
Mutation::update_candidate_password_with_keys(db, candidate.clone(), new_password_hash, pubkey, encrypted_priv_key).await?;
let enc_details_opt = EncryptedApplicationDetails::try_from((candidate, parent));

12
core/src/services/session_service.rs
View file

@ -1,7 +1,7 @@
use std::cmp::min;
use entity::{admin, candidate};
use sea_orm::{prelude::Uuid, DatabaseConnection, ModelTrait};
use sea_orm::{prelude::Uuid, DatabaseConnection, ModelTrait, DbConn};
use crate::{
crypto::{self},
@ -114,9 +114,12 @@ impl SessionService {
Ok(session.id.to_string())
}
pub async fn revoke_all_sessions(db: &DbConn, user_id: Option<i32>, admin_id: Option<i32>) -> Result<(), ServiceError> {
Self::delete_old_sessions(db, user_id, admin_id, 0).await
}
/// Authenticate user by session id
/// Return user model if session is valid
pub async fn auth_user_session(
db: &DatabaseConnection,
uuid: Uuid,
@ -162,11 +165,8 @@ impl SessionService {
#[cfg(test)]
mod tests {
use entity::{admin, candidate, session, parent};
use sea_orm::{
prelude::Uuid, sea_query::TableCreateStatement, ConnectionTrait, Database, DbBackend,
DbConn, Schema,
prelude::Uuid,
};
use crate::{