Function GetTokenViaBasic

db_controller/db_controller.go:280–314

GetTokenViaBasic retrieves a token using only the password @results: accessToken, refreshToken, accessExpiry, refreshExpiry, pds, did, hash, salt, uuid, error

(username string, password string)

// GetTokenViaBasic retrieves a token using only the password
// @results: accessToken, refreshToken, accessExpiry, refreshExpiry, pds, did, hash, salt, uuid, error
func GetTokenViaBasic(username string, password string) (*string, *string, *float64, *float64, *string, *string, *string, *string, *string, error) {
	var tokens []Token
	if err := db.Where("basic_auth_username = ?", username).Find(&tokens).Error; err != nil {
		return nil, nil, nil, nil, nil, nil, nil, nil, nil, fmt.Errorf("invalid credentials")
	}
	var token Token
	if len(tokens) == 0 {
		return nil, nil, nil, nil, nil, nil, nil, nil, nil, fmt.Errorf("invalid credentials")
	}

	for _, t := range tokens {
		if err := bcrypt.CompareHashAndPassword([]byte(token.BasicAuthHash), []byte(password)); err != nil {
			token = t
			break
		}
	}

	if token.EncryptedAccessToken == "" {
		return nil, nil, nil, nil, nil, nil, nil, nil, nil, fmt.Errorf("invalid credentials")
	}

	encryptionKey := authcrypt.DeriveKeyFromPassword(password, token.BasicAuthSalt)

	accessToken, err := authcrypt.Decrypt(token.EncryptedAccessToken, encryptionKey)
	if err != nil {
		return nil, nil, nil, nil, nil, nil, nil, nil, nil, err
	}

	refreshToken, err := authcrypt.Decrypt(token.EncryptedRefreshToken, encryptionKey)
	if err != nil {
		return nil, nil, nil, nil, nil, nil, nil, nil, nil, err
	}

	return &accessToken, &refreshToken, &token.AccessExpiry, &token.RefreshExpiry, &token.UserPDS, &token.UserDid, &token.BasicAuthHash, &token.BasicAuthSalt, &token.TokenUUID, nil
}

// DeleteToken deletes a token using did and uuid
func DeleteToken(did string, tokenUUID string) error {