rainbownapkin/canopy
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

Added logic to keep banned users out of site

Browse source
This commit is contained in:
rainbow napkin 2024-11-29 09:00:47 -05:00
parent c848994c1d
commit 26df91262f
4 changed files with 28 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/schemas/userBanSchema.js
View file

@ -159,4 +159,14 @@ userBanSchema.statics.getBans = async function(){
return bans;
}
//methods
userBanSchema.methods.getDaysUntilExpiration = function(){
//Get ban date
const expirationDate = new Date(this.banDate);
//Get expiration days and calculate expiration date
expirationDate.setDate(expirationDate.getDate() + this.expirationDays);
//Calculate and return days until ban expiration
return ((expirationDate - new Date()) / (1000 * 60 * 60 * 24)).toFixed(1);
}
module.exports = mongoose.model("userBan", userBanSchema);

14
src/utils/sessionUtils.js
View file

@ -15,14 +15,24 @@ You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.*/
//local imports
const {userModel} = require('../schemas/userSchema.js');
const {userModel} = require('../schemas/userSchema');
const userBanModel = require('../schemas/userBanSchema')
//this module is good for keeping wrappers for userModel and other shit in that does more session handling than database access/modification.
module.exports.authenticateSession = async function(user, pass, req){
//Authenticate the session
userDB = await userModel.authenticate(user, pass);
const userDB = await userModel.authenticate(user, pass);
const banDB = await userBanModel.checkBanByUserDoc(userDB);
if(banDB){
if(banDB.permanent){
throw new Error(`Your account has been banned, and will be permanently deleted in: ${banDB.getDaysUntilExpiration()} day(s)`);
}else{
throw new Error(`Your account has been temporarily banned, and will be reinstated in: ${banDB.getDaysUntilExpiration()} day(s)`);
}
}
//Tattoo the session with user and metadata
//unfortunately store.all() does not return sessions w/ their ID so we had to improvise...