backend auth

Author: ngjiayuan

AuthService/package-lock.json

@@ -14,7 +14,8 @@
     "dotenv": "^16.3.1",
     "express": "~4.16.1",
     "firebase": "^10.4.0",
-    "http-errors": "~1.6.3"
+    "http-errors": "~1.6.3",
+    "mime": "^1.6.0"
   },
   "devDependencies": {
     "@types/express": "^4.17.18",

AuthService/package.json

@@ -8,8 +8,13 @@ export async function handleSignUp(req: Request, res: Response) {
     const signedUp = await signUp(email, password);
     res.status(200).send(signedUp);
   } catch (error) {
-    console.error(error);
-    res.status(500).send(error);
+    if (error instanceof Error) {
+      console.error(error.message);
+      res.status(500).send(error.message);
+    } else {
+      console.error(error);
+      res.status(500).send(error);
+    }
   }
 }
 
@@ -20,8 +25,13 @@ export async function handleLogin(req: Request, res: Response) {
     const loggedIn = await login(email, password);
     res.status(200).send(loggedIn);
   } catch (error) {
-    console.error(error);
-    res.status(500).send(error);
+    if (error instanceof Error) {
+      console.error(error.message);
+      res.status(500).send(error.message);
+    } else {
+      console.error(error);
+      res.status(500).send(error);
+    }
   }
 }
 

AuthService/src/auth/auth.controller.ts

@@ -12,17 +12,26 @@ import { firebaseConfig } from "../firebase/firebase.config";
 initializeApp(firebaseConfig);
 const auth = getAuth();
 
+interface SignupCredential {
+  user: UserCredential;
+  token: string;
+}
+
 export async function signUp(
   email: string,
   password: string
-): Promise<UserCredential> {
+): Promise<SignupCredential> {
   try {
     const user: UserCredential = await createUserWithEmailAndPassword(
       auth,
       email,
       password
     );
-    return Promise.resolve(user);
+    const token: string = await user.user.getIdToken();
+    return Promise.resolve({
+      user: user,
+      token: token,
+    });
   } catch (error: any) {
     return Promise.reject(error);
   }

AuthService/src/auth/auth.service.ts

@@ -4,35 +4,19 @@ import {
   handleLogin,
   handleLogout,
   handleSignUp,
-  handleDelete
+  handleDelete,
 } from "./auth/auth.controller";
-// import { Socket, Server } from 'socket.io';
-// import { initializeApp } from 'firebase/app';
-// import { getFirestore } from 'firebase/firestore';
-// import { firebaseConfig } from "./firebase/firebase.config";
-// import { Server as ServerHttp } from 'http';
 
 const app = express();
 const port = 3003;
 app.use(cors());
 app.use(express.json());
 
-app.get("/", (req, res) => {
-  res.send("Hello World!");
-});
-
-
 app.post("/signup", handleSignUp);
 app.post("/login", handleLogin);
 app.delete("/logout", handleLogout);
 app.delete("/delete", handleDelete);
 
-
-
-// httpServer.listen(socketPort, () => {
-//   console.log(`socket listening on port ${socketPort}`);
-// });
-
 app.listen(port, () => {
   console.log(`Auth Service listening on port ${port}`);
 });

AuthService/src/index.ts

@@ -14,7 +14,8 @@
     "dotenv": "^16.3.1",
     "express": "~4.16.1",
     "firebase": "^10.4.0",
-    "http-errors": "~1.6.3"
+    "http-errors": "~1.6.3",
+    "axios": "^1.5.1"
   },
   "devDependencies": {
     "@types/express": "^4.17.18",

QuestionService/package.json

@@ -1,9 +1,13 @@
 import { Request, Response } from "express";
-import {addQuestion, db, deleteQuestion, updateQuestion} from "./question.service";
 import {
-  getDocs,
-  collection,
-} from "firebase/firestore";
+  addQuestion,
+  db,
+  deleteQuestion,
+  isValidToken,
+  updateQuestion,
+} from "./question.service";
+import { getDocs, collection } from "firebase/firestore";
+import axios from "axios";
 
 interface Question {
   title: string;
@@ -22,8 +26,19 @@ interface Example {
 
 export async function handleGetQuestions(req: Request, res: Response) {
   try {
-    //   console.log(req.query.email);
-    //   const { email } = req.query;
+    console.log("getting questions");
+    const { token } = req.query;
+    if (!token) {
+      res.status(500).send("unauthorized access");
+    }
+    if (typeof token === "string") {
+      const response = await isValidToken(token);
+      if (!response) {
+        res.status(500).send("unauthorized access");
+      }
+    } else {
+      res.status(500).send("invalid params");
+    }
     const query = await getDocs(collection(db, "questions"));
     const result = await Promise.all(
       query.docs.map(async (d) => {
@@ -96,7 +111,7 @@ export async function handleUpdateQuestion(req: Request, res: Response) {
       examples,
     } = req.body;
     console.log(`updating question ${questionId}: ${title}`);
-    const question = await updateQuestion(questionId,{
+    const question = await updateQuestion(questionId, {
       title: title,
       tags: tags,
       categories: categories,

QuestionService/src/question/question.controller.ts

@@ -1,6 +1,15 @@
 import { initializeApp } from "firebase/app";
-import {addDoc, collection, deleteDoc, doc, getFirestore, setDoc} from "firebase/firestore";
-import { firebaseConfig } from "../firebase/firebase.config"
+import {
+  addDoc,
+  collection,
+  deleteDoc,
+  doc,
+  getDocs,
+  getFirestore,
+  setDoc,
+  query,
+} from "firebase/firestore";
+import { firebaseConfig } from "../firebase/firebase.config";
 
 initializeApp(firebaseConfig);
 export const db = getFirestore();
@@ -30,13 +39,19 @@ export async function deleteQuestion(questionId: string) {
   }
 }
 
-export async function updateQuestion(questionId: string, question: Question): Promise<Question> {
+export async function updateQuestion(
+  questionId: string,
+  question: Question
+): Promise<Question> {
   try {
-    let questionDoc: Omit<Question, "examples"> = question
+    let questionDoc: Omit<Question, "examples"> = question;
     const docRef = doc(db, "questions", questionId);
     await setDoc(docRef, questionDoc);
     for (let i = 0; i < question.examples.length; i++) {
-      const add = setDoc(doc(docRef, "examples", (i+1).toString()), question.examples[i]);
+      const add = setDoc(
+        doc(docRef, "examples", (i + 1).toString()),
+        question.examples[i]
+      );
     }
     return Promise.resolve(question);
   } catch (error) {
@@ -46,14 +61,34 @@ export async function updateQuestion(questionId: string, question: Question): Pr
 
 export async function addQuestion(question: Question): Promise<Question> {
   try {
-    let questionDoc: Omit<Question, "examples"> = question
+    let questionDoc: Omit<Question, "examples"> = question;
     const docRef = await addDoc(collection(db, "questions"), questionDoc);
     for (let i = 0; i < question.examples.length; i++) {
-      const add = setDoc(doc(docRef, "examples", (i+1).toString()), question.examples[i]);
+      const add = setDoc(
+        doc(docRef, "examples", (i + 1).toString()),
+        question.examples[i]
+      );
     }
     return Promise.resolve(question);
   } catch (error) {
     return Promise.reject(error);
   }
 }
 
+export async function isValidToken(token: string): Promise<boolean> {
+  try {
+    const q = query(collection(db, "users"));
+    const querySnapshot = await getDocs(q);
+    const tokens = new Set();
+    querySnapshot.forEach((doc) => {
+      const user = doc.data();
+      tokens.add(user.token);
+    });
+    if (tokens.has(token)) {
+      return Promise.resolve(true);
+    }
+    return Promise.resolve(false);
+  } catch (error) {
+    return Promise.reject(error);
+  }
+}

QuestionService/src/question/question.service.ts

@@ -1,41 +1,26 @@
 import express from "express";
 import cors from "cors";
 
-// import { initializeApp } from 'firebase/app';
-// import { getFirestore } from 'firebase/firestore';
-// import { firebaseConfig } from "./firebase/firebase.config";
-// import { Socket, Server } from 'socket.io';
-// import { Server as ServerHttp } from 'http';
-
-import { handleCreateUser, handleDeleteUser, handleGetUser, handleUpdateUser, handleCreateAdminUser, handleGetAdminUsers } from "./user/user.controller";
+import {
+  handleCreateUser,
+  handleDeleteUser,
+  handleGetUser,
+  handleUpdateUser,
+  handleCreateAdminUser,
+  handleGetAdminUsers,
+} from "./user/user.controller";
 const app = express();
 const port = 3004;
 app.use(cors());
 app.use(express.json());
 
-
-
-app.get("/", (req, res) => {
-  res.send("Hello World!");
-});
-
-// Initialize Firebase Firestore and other configurations here
-// initializeApp(firebaseConfig);
-// const db = getFirestore();
-
 app.post("/user", handleCreateUser);
 app.get("/adminusers", handleGetAdminUsers);
 app.post("/useradmin", handleCreateAdminUser);
 app.get("/user", handleGetUser);
 app.put("/user", handleUpdateUser);
 app.delete("/user", handleDeleteUser);
 
-
-
-// httpServer.listen(socketPort, () => {
-//   console.log(`socket listening on port ${socketPort}`);
-// });
-
 app.listen(port, () => {
   console.log(`User Service listening on port ${port}`);
 });

UserService/src/index.ts

@@ -1,12 +1,19 @@
 import { Request, Response } from "express";
 
-import { createAdminUser, delUser, createUser, getAdminUsers, getUser, updateUser } from "./user.service";
+import {
+  createAdminUser,
+  delUser,
+  createUser,
+  getAdminUsers,
+  getUser,
+  updateUser,
+} from "./user.service";
 
 export async function handleCreateUser(req: Request, res: Response) {
   try {
-    const { email } = req.body;
+    const { email, token } = req.body;
     console.log(`creating user ${email}`);
-    const user = await createUser(email);
+    const user = await createUser(email, token);
     res.status(200).send(user);
   } catch (error) {
     console.error(error);
@@ -16,9 +23,9 @@ export async function handleCreateUser(req: Request, res: Response) {
 
 export async function handleCreateAdminUser(req: Request, res: Response) {
   try {
-    const { email } = req.body;
+    const { email, token } = req.body;
     console.log(`creating admin user ${email}`);
-    const user = await createAdminUser(email);
+    const user = await createAdminUser(email, token);
     res.status(200).send(user);
   } catch (error) {
     console.error(error);
@@ -74,9 +81,9 @@ export async function handleUpdateUser(req: Request, res: Response) {
 export async function handleDeleteUser(req: Request, res: Response) {
   try {
     const user = req.query;
-    if (user && typeof(user.email) === "string") {
+    if (user && typeof user.email === "string") {
       console.log(`deleting user`);
-      await delUser(user.email)
+      await delUser(user.email);
       res.status(200).send("no params");
     } else {
       res.status(500).send("no params");