[SPGO 34] implement validate token function

src/auth/auth.controller.ts

@@ -9,6 +9,8 @@ import {
   LogoutResponse,
   RegisterRequest,
   RegisterResponse,
+  ValidateTokenRequest,
+  ValidateTokenResponse,
   ResetPasswordRequest,
   ResetPasswordResponse,
   // ValidateGoogleRequest,
@@ -55,4 +57,9 @@ export class AuthController {
     return this.authService.resetPassword(request);
 
   }
+
+  @GrpcMethod('AuthService', 'ValidateToken')
+  validateToken(request: ValidateTokenRequest): Promise<ValidateTokenResponse> {
+    return this.authService.validateToken(request);
+  }
 }

src/auth/auth.pb.ts

@@ -82,6 +82,14 @@ export interface ForgotPasswordResponse {
   resetPasswordUrl: string;
 }
 
+export interface ValidateTokenRequest {
+  token: string;
+}
+
+export interface ValidateTokenResponse {
+  isValid: boolean;
+}
+
 export const AUTH_PACKAGE_NAME = "auth";
 
 export interface AuthServiceClient {
@@ -99,6 +107,8 @@ export interface AuthServiceClient {
 
   logout(request: LogoutRequest): Observable<LogoutResponse>;
 
+  validateToken(request: ValidateTokenRequest): Observable<ValidateTokenResponse>;
+
   forgotPassword(request: ForgotPasswordRequest): Observable<ForgotPasswordResponse>;
 }
 
@@ -121,6 +131,10 @@ export interface AuthServiceController {
 
   logout(request: LogoutRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
 
+  validateToken(
+    request: ValidateTokenRequest,
+  ): Promise<ValidateTokenResponse> | Observable<ValidateTokenResponse> | ValidateTokenResponse;
+
   forgotPassword(
     request: ForgotPasswordRequest,
   ): Promise<ForgotPasswordResponse> | Observable<ForgotPasswordResponse> | ForgotPasswordResponse;
@@ -136,6 +150,7 @@ export function AuthServiceControllerMethods() {
       "validateOAuth",
       "logout",
       "forgotPassword",
+      "validateToken",
     ];
     for (const method of grpcMethods) {
       const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);

src/auth/auth.service.ts

@@ -16,6 +16,8 @@
   RefreshTokenResponse,
   RegisterRequest,
   RegisterResponse,
+  ValidateTokenRequest,
+  ValidateTokenResponse,
   ResetPasswordRequest,
   ResetPasswordResponse,
   // ValidateGoogleRequest,
@@ -39,7 +41,7 @@
     private blacklistRepo: BlacklistRepository,
     private jwtService: JwtService,
     private configService: ConfigService,
-  ) { }
+  ) {}
 
   public async login(request: LoginRequest): Promise<LoginResponse> {
     try {
@@ -92,7 +94,7 @@
     }
   }
 
   public async refreshToken(
     request: RefreshTokenRequest,
   ): Promise<RefreshTokenResponse> {
     return null;
@@ -178,14 +180,48 @@
     }
   }
 
+  public async validateToken(
+    request: ValidateTokenRequest,
+  ): Promise<ValidateTokenResponse> {
+    try {
+      const decodedToken = this.jwtService.verify(request.token, {
+        secret: this.configService.get<string>('JWT_ACCESS_SECRET'),
+      });
+      if (!decodedToken) {
+        return { isValid: false };
+      }
+      if (
+        decodedToken.registeredClaims.issuer !==
+        this.configService.get<string>('TOKEN_ISSUER')
+      ) {
+        return { isValid: false };
+      }
+
+      if (decodedToken.registeredClaims.expiredAt < Date.now()) {
+        return { isValid: false };
+      }
+
+      return { isValid: true };
+    } catch (err) {
+      console.log(err);
+      if (!(err instanceof RpcException)) {
+        throw new RpcException({
+          code: status.INTERNAL,
+          message: 'internal server error',
+        });
+      }
+      throw err;
+    }
+  }
+
   private async getTokens(userId: string) {
     try {
       const accessToken = await this.jwtService.signAsync(
         {
           sub: userId,
           registeredClaims: {
             issuer: this.configService.get<string>('TOKEN_ISSUER'),
-            expiredAt: Date.now() + 60 * 15,
+            expiredAt: Date.now() + 60 * 15 * 1000,
             issuedAt: Date.now(),
           },
         },
@@ -200,7 +236,7 @@
           sub: userId,
           registeredClaims: {
             issuer: '',
-            expiredAt: Date.now() + 60 * 60 * 24 * 7,
+            expiredAt: Date.now() + 60 * 60 * 24 * 7 * 1000,
             issuedAt: Date.now(),
           },
         },

src/proto/auth.proto

@@ -10,6 +10,7 @@ service AuthService {
   rpc ResetPassword(ResetPasswordRequest) returns (ResetPasswordResponse) {}
   rpc ValidateOAuth(ValidateOAuthRequest) returns (LoginResponse) {}
   rpc Logout(LogoutRequest) returns (LogoutResponse) {}
+  rpc ValidateToken(ValidateTokenRequest) returns (ValidateTokenResponse) {}
   rpc ForgotPassword(ForgotPasswordRequest) returns (ForgotPasswordResponse) {}
 }
 
@@ -89,3 +90,11 @@ message ForgotPasswordRequest {
 message ForgotPasswordResponse {
   string reset_password_url = 1;
 }
+
+message ValidateTokenRequest {
+  string token = 1;
+}
+
+message ValidateTokenResponse {
+  bool is_valid = 1;
+}