mirror of
https://github.com/pocket-id/pocket-id.git
synced 2026-08-22 12:56:43 +00:00
76 lines
2.2 KiB
Go
76 lines
2.2 KiB
Go
package cmds
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/spf13/cobra"
|
|
"gorm.io/gorm"
|
|
|
|
"github.com/pocket-id/pocket-id/backend/internal/bootstrap"
|
|
"github.com/pocket-id/pocket-id/backend/internal/common"
|
|
"github.com/pocket-id/pocket-id/backend/internal/model"
|
|
"github.com/pocket-id/pocket-id/backend/internal/onetimeaccess"
|
|
)
|
|
|
|
var oneTimeAccessTokenCmd = &cobra.Command{
|
|
Use: "one-time-access-token [username or email]",
|
|
Short: "Generates a one-time access token for the given user",
|
|
Args: cobra.ExactArgs(1),
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
// Get the username or email of the user
|
|
userArg := args[0]
|
|
|
|
// Connect to the database
|
|
db, pg, err := bootstrap.NewDatabase(cmd.Context())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Load the user to retrieve the user ID
|
|
var user model.User
|
|
queryCtx, queryCancel := context.WithTimeout(cmd.Context(), 10*time.Second)
|
|
defer queryCancel()
|
|
err = db.
|
|
WithContext(queryCtx).
|
|
Where("username = ? OR email = ?", userArg, userArg).
|
|
First(&user).
|
|
Error
|
|
switch {
|
|
case errors.Is(err, gorm.ErrRecordNotFound):
|
|
return errors.New("user not found")
|
|
case err != nil:
|
|
return fmt.Errorf("failed to query for user: %w", err)
|
|
case user.ID == "":
|
|
return errors.New("invalid user loaded: ID is empty")
|
|
}
|
|
|
|
// One-time access tokens are stored in the actor state store
|
|
// The CLI doesn't run the full actor host, so it uses a minimal state store to persist the token directly
|
|
actorStore, err := bootstrap.NewActorStateStore(db, pg)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to initialize the actor state store: %w", err)
|
|
}
|
|
|
|
// Create a new access token that expires in 1 hour
|
|
tokenCtx, tokenCancel := context.WithTimeout(cmd.Context(), 10*time.Second)
|
|
defer tokenCancel()
|
|
token, _, err := onetimeaccess.StoreToken(tokenCtx, actorStore, user.ID, time.Hour, false)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create access token: %w", err)
|
|
}
|
|
|
|
// Print the result
|
|
fmt.Printf(`A one-time access token valid for 1 hour has been created for "%s".`+"\n", userArg)
|
|
fmt.Printf("Use the following URL to sign in once: %s/lc/%s\n", common.EnvConfig.AppURL, token)
|
|
|
|
return nil
|
|
},
|
|
}
|
|
|
|
func init() {
|
|
rootCmd.AddCommand(oneTimeAccessTokenCmd)
|
|
}
|