backend : Updated auth service

OpenVidu · Oct 30, 2024 · aca7e24 · aca7e24
1 parent eab7eb2
commit aca7e24
Show file tree

Hide file tree

Showing 2 changed files with 36 additions and 9 deletions.
diff --git a/backend/src/routes/api.routes.ts b/backend/src/routes/api.routes.ts
@@ -47,7 +47,7 @@ apiRouter.put('/broadcasts/:broadcastId', withUserBasicAuth, broadcastCtrl.stopB
 // Auth Routes
 apiRouter.post('/login', authCtrl.login);
 apiRouter.post('/logout', authCtrl.logout);
-apiRouter.post('/admin/login', loginLimiter, authCtrl.adminLogin);
+apiRouter.post('/admin/login', loginLimiter,  authCtrl.adminLogin);
 apiRouter.post('/admin/logout', authCtrl.adminLogout);
 
 // Global Preferences Routes

diff --git a/backend/src/services/auth.service.ts b/backend/src/services/auth.service.ts
@@ -1,6 +1,16 @@
 import { Request, Response, NextFunction } from 'express';
 import basicAuth from 'express-basic-auth';
-import { CALL_ADMIN_SECRET, CALL_ADMIN_USER, CALL_PRIVATE_ACCESS, CALL_SECRET, CALL_USER } from '../config.js';
+import {
+	CALL_ADMIN_SECRET,
+	CALL_ADMIN_USER,
+	CALL_NAME_ID,
+	CALL_PRIVATE_ACCESS,
+	CALL_SECRET,
+	CALL_USER,
+	LIVEKIT_API_KEY,
+	LIVEKIT_API_SECRET
+} from '../config.js';
+import { AccessToken, AccessTokenOptions, TokenVerifier } from 'livekit-server-sdk';
 
 // Configure basic auth middleware for user and admin access
 export const withAdminAndUserBasicAuth = (req: Request, res: Response, next: NextFunction) => {
@@ -61,6 +71,23 @@ export class AuthService {
 		return AuthService.instance;
 	}
 
+	generateAdminToken() {
+		const options: AccessTokenOptions = {
+			ttl: '1h',
+			metadata: JSON.stringify({
+				role: 'admin'
+			})
+		};
+		const at = new AccessToken(LIVEKIT_API_KEY, LIVEKIT_API_SECRET, options);
+
+		return at.toJwt();
+	}
+
+	async verifyToken(token: string) {
+		const verifyer = new TokenVerifier(LIVEKIT_API_KEY, LIVEKIT_API_SECRET);
+		return await verifyer.verify(token);
+	}
+
 	authenticateUser(username: string, password: string): boolean {
 		if (CALL_PRIVATE_ACCESS === 'true') {
 			return username === CALL_USER && password === CALL_SECRET;
@@ -77,14 +104,14 @@ export class AuthService {
 	validateCredentials(username: string, password: string): string[] {
 		const errors: string[] = [];
 
-	if (!username || username.length < 4) {
-		errors.push('Username must be at least 4 characters long.');
-	}
+		if (!username || username.length < 4) {
+			errors.push('Username must be at least 4 characters long.');
+		}
 
-	if (!password || password.length < 4) {
-		errors.push('Password must be at least 4 characters long.');
-	}
+		if (!password || password.length < 4) {
+			errors.push('Password must be at least 4 characters long.');
+		}
 
-	return errors;
+		return errors;
 	}
 }