deploy: e1f1eb3

Author: tacxou

controllers/AuthController.html

@@ -225,8 +225,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="26"
-                                    class="link-to-prism">src/core/auth/auth.controller.ts:26</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="28"
+                                    class="link-to-prism">src/core/auth/auth.controller.ts:28</a></div>
                         </td>
                     </tr>
 
@@ -316,8 +316,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="60"
-                                    class="link-to-prism">src/core/auth/auth.controller.ts:60</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="62"
+                                    class="link-to-prism">src/core/auth/auth.controller.ts:62</a></div>
                         </td>
                     </tr>
 
@@ -407,8 +407,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="50"
-                                    class="link-to-prism">src/core/auth/auth.controller.ts:50</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="52"
+                                    class="link-to-prism">src/core/auth/auth.controller.ts:52</a></div>
                         </td>
                     </tr>
 
@@ -499,8 +499,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="37"
-                                    class="link-to-prism">src/core/auth/auth.controller.ts:37</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="39"
+                                    class="link-to-prism">src/core/auth/auth.controller.ts:39</a></div>
                         </td>
                     </tr>
 
@@ -572,6 +572,8 @@ <h3 id="methods">
 import { Response } from &#x27;express&#x27;;
 import { ReqIdentity } from &#x27;~/_common/decorators/params/req-identity.decorator&#x27;;
 import { AgentType } from &#x27;~/_common/types/agent.type&#x27;;
+import { hash } from &#x27;crypto&#x27;;
+import { omit } from &#x27;radash&#x27;;
 
 @Public()
 @ApiTags(&#x27;core/auth&#x27;)
@@ -602,8 +604,8 @@ <h3 id="methods">
     const user &#x3D; await this.service.getSessionData(identity);
     return res.status(HttpStatus.OK).json({
       user: {
-        ...user,
-        sseToken: &#x27;hZcdVqHScVDsDFdHOdcjmufEKFJVKaS8&#x27;, //TODO: change to real token
+        ...omit(user, [&#x27;security&#x27;]),
+        sseToken: hash(&#x27;sha256&#x27;, user.security.secretKey),
       },
     });
   }
@@ -612,10 +614,10 @@ <h3 id="methods">
   @Post(&#x27;refresh&#x27;)
   @ApiOperation({ summary: &quot;Récupère un nouveau jeton d&#x27;authentification&quot; })
   public async refresh(@Res() res: Response, @Body() body: { refresh_token: string }): Promise&lt;Response&gt; {
-    const tokens &#x3D; await this.service.renewTokens(body.refresh_token);
+    const [agents, tokens] &#x3D; await this.service.renewTokens(body.refresh_token);
     return res.status(HttpStatus.OK).json({
       ...tokens,
-      sseToken: &#x27;hZcdVqHScVDsDFdHOdcjmufEKFJVKaS8&#x27;, //TODO: change to real token
+      sseToken: hash(&#x27;sha256&#x27;, agents.security.secretKey),
     });
   }
 

controllers/BackendsController.html

@@ -225,8 +225,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="49"
-                                    class="link-to-prism">src/core/backends/backends.controller.ts:49</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="54"
+                                    class="link-to-prism">src/core/backends/backends.controller.ts:54</a></div>
                         </td>
                     </tr>
 
@@ -328,8 +328,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="89"
-                                    class="link-to-prism">src/core/backends/backends.controller.ts:89</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="94"
+                                    class="link-to-prism">src/core/backends/backends.controller.ts:94</a></div>
                         </td>
                     </tr>
 
@@ -466,7 +466,7 @@ <h3 id="methods">
             <tr>
                 <td class="col-md-4">
                         <span class="modifier-icon icon ion-ios-reset"></span>
-                    <code>sse(res: Response, key: <a href="https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/string" target="_blank">string</a>)</code>
+                    <code>sse(res: Response, id: <a href="https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/string" target="_blank">string</a>, key: <a href="https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/string" target="_blank">string</a>)</code>
                 </td>
             </tr>
 
@@ -480,8 +480,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="127"
-                                    class="link-to-prism">src/core/backends/backends.controller.ts:127</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="132"
+                                    class="link-to-prism">src/core/backends/backends.controller.ts:132</a></div>
                         </td>
                     </tr>
 
@@ -512,6 +512,18 @@ <h3 id="methods">
                                             </td>
 
 
+                                        </tr>
+                                        <tr>
+                                                <td>id</td>
+                                            <td>
+                                                            <code><a href="https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/string" target="_blank" >string</a></code>
+                                            </td>
+
+                                            <td>
+                                                    No
+                                            </td>
+
+
                                         </tr>
                                         <tr>
                                                 <td>key</td>
@@ -571,8 +583,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="79"
-                                    class="link-to-prism">src/core/backends/backends.controller.ts:79</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="84"
+                                    class="link-to-prism">src/core/backends/backends.controller.ts:84</a></div>
                         </td>
                     </tr>
 
@@ -662,8 +674,8 @@ <h3 id="methods">
 
                     <tr>
                         <td class="col-md-4">
-                            <div class="io-line">Defined in <a href="" data-line="64"
-                                    class="link-to-prism">src/core/backends/backends.controller.ts:64</a></div>
+                            <div class="io-line">Defined in <a href="" data-line="69"
+                                    class="link-to-prism">src/core/backends/backends.controller.ts:69</a></div>
                         </td>
                     </tr>
 
@@ -746,12 +758,13 @@ <h3 id="methods">
   ParseIntPipe,
   Post,
   Query,
+  Req,
   Res,
   Sse,
   UnauthorizedException,
 } from &#x27;@nestjs/common&#x27;;
 import { ApiOperation, ApiTags } from &#x27;@nestjs/swagger&#x27;;
-import { Response } from &#x27;express&#x27;;
+import { Response, Request } from &#x27;express&#x27;;
 import Redis from &#x27;ioredis&#x27;;
 import { Observable, Subscriber } from &#x27;rxjs&#x27;;
 import { Public } from &#x27;~/_common/decorators/public.decorator&#x27;;
@@ -761,6 +774,9 @@ <h3 id="methods">
 import { Types } from &#x27;mongoose&#x27;;
 import { ActionType } from &#x27;./_enum/action-type.enum&#x27;;
 import { DeleteIdentitiesDto } from &#x27;./_dto/delete-identities.dto&#x27;;
+import { hash } from &#x27;crypto&#x27;;
+import { AgentsService } from &#x27;../agents/agents.service&#x27;;
+import { Agents } from &#x27;../agents/_schemas/agents.schema&#x27;;
 
 function fireMessage(observer: Subscriber&lt;MessageEvent&gt;, channel: string, message: any, loggername: string) {
   try {
@@ -779,6 +795,7 @@ <h3 id="methods">
   private readonly logger &#x3D; new Logger(BackendsController.name);
 
   constructor(
+    private agentsService: AgentsService,
     private backendsService: BackendsService,
     @InjectRedis() protected readonly redis: Redis,
   ) { }
@@ -863,8 +880,11 @@ <h3 id="methods">
   @Public()
   @Sse(&#x27;sse&#x27;)
   @ApiOperation({ summary: &#x27;Server Sent Event - Récupère en temps réel les Jobs et affiche leurs état&#x27; })
-  public async sse(@Res() res: Response, @Query(&#x27;key&#x27;) key: string): Promise&lt;Observable&lt;MessageEvent&gt;&gt; {
-    if (key !&#x3D;&#x3D; &#x27;hZcdVqHScVDsDFdHOdcjmufEKFJVKaS8&#x27;) throw new UnauthorizedException();
+  public async sse(@Res() res: Response, @Query(&#x27;id&#x27;) id: string, @Query(&#x27;key&#x27;) key: string): Promise&lt;Observable&lt;MessageEvent&gt;&gt; {
+    if (!id || !key) throw new UnauthorizedException();
+    const user &#x3D; await this.agentsService.findById&lt;Agents&gt;(id);
+    if (!user) throw new UnauthorizedException();
+    if (key !&#x3D;&#x3D; hash(&#x27;sha256&#x27;, user.security.secretKey)) throw new UnauthorizedException();
 
     res.socket.on(&#x27;close&#x27;, () &#x3D;&gt; {
       Logger.debug(&#x60;Observer close connection&#x60;, this.constructor.name);