FarmBot/Farmbot-Web-App

module Auth
  class FromJwt < Mutations::Command
    required { string :jwt }

    def execute
      token = SessionToken.decode!(just_the_token)
      claims = token.unencoded
      RequestStore.store[:jwt] = claims.deep_symbolize_keys
      u = User.includes(:device).find(claims["sub"])
      check_it!(claims)
      Device.current = u.device
      u
    rescue JWT::DecodeError, ActiveRecord::RecordNotFound
      add_error :jwt, :decode_error, Auth::ReloadToken::BAD_SUB
    end

    # Triggers ActiveRecord::RecordNotFound if TokenIssuance is expired or
    # missing.
    def check_it!(claims)
      device_id = claims["bot"].gsub("device_", "").to_i
      TokenIssuance
        .where("exp > ?", Time.now.to_i)
        .find_by!(jti: claims["jti"], device_id: device_id)
    end

    def just_the_token
      # Token auth requires the `authorization` header to be in the format of:
      # "Authorization: Bearer <INSERT_TOKEN_HERE>"
      # This helper method strips out the use "Bearer " text from a token, if it
      # managed to sneak in.
      jwt.split(" ").last
    end
  end
end