94 lines
2.7 KiB
TypeScript
94 lines
2.7 KiB
TypeScript
import { Context } from "hono";
|
|
import { Bindings, BlankEnv } from "hono/types";
|
|
import { ErrorResponse } from "src/schema";
|
|
import { createHandlers } from "src/utils.ts";
|
|
import * as jose from "jose";
|
|
import { generateRandomId } from "@core/lib/randomID.ts";
|
|
import { lockManager } from "@core/mq/lockManager.ts";
|
|
|
|
interface CaptchaResponse {
|
|
success: boolean;
|
|
difficulty?: number;
|
|
error?: string;
|
|
}
|
|
|
|
const getChallengeVerificationResult = async (id: string, ans: string) => {
|
|
const baseURL = process.env["UCAPTCHA_URL"];
|
|
const url = new URL(baseURL);
|
|
url.pathname = `/challenge/${id}/validation`;
|
|
return await fetch(url.toString(), {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/json"
|
|
},
|
|
body: JSON.stringify({
|
|
y: ans
|
|
})
|
|
});
|
|
};
|
|
|
|
export const verifyChallengeHandler = createHandlers(
|
|
async (c: Context<BlankEnv & { Bindings: Bindings }, "/captcha/:id/result">) => {
|
|
const id = c.req.param("id");
|
|
const ans = c.req.query("ans");
|
|
if (!ans) {
|
|
const response: ErrorResponse<string> = {
|
|
message: "Missing required query parameter: ans",
|
|
code: "INVALID_QUERY_PARAMS"
|
|
};
|
|
return c.json<ErrorResponse<string>>(response, 400);
|
|
}
|
|
const res = await getChallengeVerificationResult(id, ans);
|
|
const data: CaptchaResponse = await res.json();
|
|
if (data.error && res.status === 404) {
|
|
const response: ErrorResponse<string> = {
|
|
message: data.error,
|
|
code: "ENTITY_NOT_FOUND"
|
|
};
|
|
return c.json<ErrorResponse<string>>(response, 401);
|
|
} else if (data.error && res.status === 400) {
|
|
const response: ErrorResponse<string> = {
|
|
message: data.error,
|
|
code: "INVALID_QUERY_PARAMS"
|
|
};
|
|
return c.json<ErrorResponse<string>>(response, 400);
|
|
} else if (data.error) {
|
|
const response: ErrorResponse<string> = {
|
|
message: data.error,
|
|
code: "UNKNOWN_ERROR"
|
|
};
|
|
return c.json<ErrorResponse<string>>(response, 500);
|
|
}
|
|
if (!data.success) {
|
|
const response: ErrorResponse<string> = {
|
|
message: "Incorrect answer",
|
|
code: "INVALID_CREDENTIALS"
|
|
};
|
|
return c.json<ErrorResponse<string>>(response, 401);
|
|
}
|
|
|
|
const secret = process.env["JWT_SECRET"];
|
|
if (!secret) {
|
|
const response: ErrorResponse<string> = {
|
|
message: "JWT_SECRET is not set",
|
|
code: "SERVER_ERROR"
|
|
};
|
|
return c.json<ErrorResponse<string>>(response, 500);
|
|
}
|
|
const jwtSecret = new TextEncoder().encode(secret);
|
|
const alg = "HS256";
|
|
|
|
|
|
const tokenID = generateRandomId(10);
|
|
const EXPIRE_FIVE_MINUTES = 300;
|
|
await lockManager.acquireLock(tokenID, EXPIRE_FIVE_MINUTES);
|
|
const jwt = await new jose.SignJWT({ difficulty: data.difficulty!, id: tokenID })
|
|
.setProtectedHeader({ alg })
|
|
.setIssuedAt()
|
|
.sign(jwtSecret);
|
|
return c.json({
|
|
token: jwt
|
|
});
|
|
}
|
|
);
|