blsmedia/bot
2
0
Fork 0
Code Activity

fix(sheets): 🔒️ Check token id before updating creds

Browse Source
This commit is contained in:
Baptiste Arnaud
2022-07-02 08:28:20 +02:00
parent 994ae61719
commit 9cddc755a3
5 changed files with 35 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
apps/viewer/libs/google-sheets.ts
View File

@ -1,7 +1,7 @@
import { Credentials as CredentialsFromDb } from 'db'
import { OAuth2Client, Credentials } from 'google-auth-library'
import { GoogleSheetsCredentialsData } from 'models'
import { decrypt, encrypt } from 'utils'
import { decrypt, encrypt, isDefined } from 'utils'
import prisma from './prisma'
export const getAuthenticatedGoogleClient = async (
@ -29,9 +29,15 @@ export const getAuthenticatedGoogleClient = async (
const updateTokens =
(credentialsId: string, existingCredentials: GoogleSheetsCredentialsData) =>
async (credentials: Credentials) => {
const newCredentials = {
refresh_token: existingCredentials.refresh_token,
...credentials,
if (
isDefined(existingCredentials.id_token) &&
credentials.id_token !== existingCredentials.id_token
)
return
const newCredentials: GoogleSheetsCredentialsData = {
...existingCredentials,
expiry_date: credentials.expiry_date,
access_token: credentials.access_token,
}
const { encryptedData, iv } = encrypt(newCredentials)
await prisma.credentials.update({