Merge pull request #297 from oof2win2/feature/jwt-apikey

Author: oof2win2

.env.example

@@ -1,5 +1,7 @@
 MONGOURI=MongoDB URI
 DISCORD_BOTTOKEN=Discord bot token
+CLIENTID=Discord bot Client ID (User ID of the bot)
 SENTRY_LINK=Sentry.io link
 API_PORT=Port to run the API at
 PROMETHEUS_PORT=Port to run the Prometheus server at
+JWT_SECRET=Your JWT secret

.gitignore

@@ -3,6 +3,7 @@
 config.ts
 dist/
 *.code-workspace
+masterapikey.txt
 
 # Logs
 logs

package-lock.json

@@ -28,7 +28,7 @@
 		"discord.js": "^13.6.0",
 		"dotenv": "^14.1.0",
 		"envalid": "^7.2.2",
-		"fagc-api-types": "^1.6.1",
+		"fagc-api-types": "^1.7.0",
 		"fastify": "^3.24.0",
 		"fastify-autoload": "^3.10.0",
 		"fastify-cors": "^6.0.2",
@@ -40,6 +40,7 @@
 		"fastify-request-context": "^2.2.0",
 		"fastify-swagger": "^4.13.1",
 		"fastify-websocket": "^4.0.0",
+		"jose": "^4.3.8",
 		"mongoose": "^6.1.6",
 		"mongoose-to-swagger": "^1.3.0",
 		"openapi3-ts": "^2.0.1",
@@ -61,6 +62,7 @@
 	"devDependencies": {
 		"@types/debug": "^4.1.7",
 		"@types/eslint": "^8.2.2",
+		"@types/faker": "^5.5.9",
 		"@types/fastify-rate-limit": "^2.1.0",
 		"@types/jest": "^27.4.0",
 		"@types/mongoose": "^5.11.97",
@@ -71,10 +73,12 @@
 		"@types/ws": "^8.2.2",
 		"@typescript-eslint/eslint-plugin": "^5.9.1",
 		"@typescript-eslint/parser": "^5.9.1",
+		"faker": "^5.5.3",
 		"inversify": "^6.0.1",
 		"jest": "^27.4.7",
 		"jest-mock-extended": "^2.0.4",
 		"lint-staged": "^12.1.7",
+		"mockingoose": "^2.15.2",
 		"nodemon": "^2.0.12",
 		"ts-jest": "^27.1.3",
 		"ts-node": "^10.4.0",

package.json

@@ -27,6 +27,9 @@ export class CommunityClass {
 
 	@prop({ type: [ String ] })
 		guildIds!: string[]
+	
+	@prop({ type: Date, default: new Date(0) })
+		tokenInvalidBefore!: Date
 }
 
 const CommunityModel = getModelForClass(CommunityClass)

src/database/authentication.ts

@@ -2,6 +2,9 @@ import ENV from "./utils/env"
 import mongoose from "mongoose"
 import fastify from "./app"
 import { client } from "./utils/discord"
+import CommunityModel from "./database/community"
+import { createApikey } from "./utils/authentication"
+import fs from "fs/promises"
 
 mongoose.connect(ENV.MONGOURI, {
 	ignoreUndefined: true,
@@ -17,6 +20,22 @@ const start = async () => {
 		console.log(`Server listening on :${port}`)
 
 		client.login(ENV.DISCORD_BOTTOKEN)
+
+		const communityCount = await CommunityModel.countDocuments()
+		if (communityCount == 0) {
+			// need to create the first community as none exist, so that the api can be used
+			const community = await CommunityModel.create({
+				name: "FAGC Master Community",
+				contact: client.user?.id
+			})
+			const apikey = await createApikey(community, "master")
+			try {
+				await fs.writeFile("./masterapikey.txt", apikey, { flag: "w", mode: process.platform === "win32" ? undefined : 0o600 })
+				console.log(`Created first community ${community.id} with apikey written to ./masterapikey.txt, which has master API access. Be careful with sharing it.`)
+			} catch (e) {
+				console.log(`Failed to write master apikey for community ${community.id} to ./masterapikey.txt. It is: ||${apikey}|| (remove ||). Be careful with sharing it.`)
+			}
+		}
 	} catch (err) {
 		console.error(err)
 		process.exit(1)