package dao import jakarta.inject.Inject import play.api.db.slick.{DatabaseConfigProvider, HasDatabaseConfigProvider} import slick.jdbc.PostgresProfile import slick.jdbc.PostgresProfile.api.* import java.nio.ByteBuffer import java.security.SecureRandom import java.util.Base64 import java.time.{Duration, Instant} import scala.concurrent.{ExecutionContext, Future} import models.AuthToken import schemas.AuthTokens import scala.language.postfixOps class AuthTokensDAO @Inject()(protected val dbConfigProvider: DatabaseConfigProvider)(implicit val ec: ExecutionContext) extends HasDatabaseConfigProvider[PostgresProfile] { private lazy val random = SecureRandom() private lazy val base64 = Base64.getEncoder private final lazy val tokenValidDuration = Duration.ofDays(30) def find(token: String): Future[Option[AuthToken]] = { val query = AuthTokens.filter(row => row.token === token && row.expiresAt > Instant.now()).take(1).result.headOption db.run(query) } def createToken(user: models.User): Future[AuthToken] = { val tokenRaw = ByteBuffer.allocate(12) random.nextBytes(tokenRaw.array()) val token = AuthToken( id = None, userId = user.id.get, token = base64.encodeToString(tokenRaw.array()), createdAt = Instant.now, expiresAt = Instant.now.plus(tokenValidDuration) ) db.run((AuthTokens returning AuthTokens.map(_.id)) += token).map { tokenId => token.copy(id = Some(tokenId)) } } def destroy(token: AuthToken): Future[Unit] = { val q = AuthTokens.filter(_.token === token.token).delete db.run(q).map{ _ => () } } }