loginToken api for getting tokens after login

src/controllers/auth/login.ts

@@ -1,7 +1,7 @@
-import { CookieOptions, Request, Response } from "express";
-import { createJwtToken } from "../../utils/createJwtToken";
+import { Request, Response } from "express";
 import { prisma } from "../../utils/prisma";
 import * as bcrypt from "bcrypt";
+import { setDataInRedis } from "../../redis";
 
 export const login = async (req: Request, res: Response) => {
   try {
@@ -33,24 +33,23 @@ export const login = async (req: Request, res: Response) => {
       });
     }
 
-    const acessToken = createJwtToken(
-      isUserNameAlreadyExist.userId,
-      isUserNameAlreadyExist.username,
-      isUserNameAlreadyExist.publicKey,
-      "access"
-    );
-    const refreshToken = createJwtToken(
-      isUserNameAlreadyExist.userId,
-      isUserNameAlreadyExist.username,
-      isUserNameAlreadyExist.publicKey,
-      "refresh"
-    );
+    // create random token for identifying user
+    const loginToken =
+      Math.random().toString(36).substring(2, 15) +
+      Math.random().toString(36).substring(2, 15);
+
+    // store that login token in redis for 5 minutes
+    await setDataInRedis({
+      key: `loginToken:${isUserNameAlreadyExist.userId}`,
+      data: loginToken,
+      expirationTimeInSeconds: 300,
+      isString: true,
+    });
 
     return res.status(200).send({
       success: true,
       message: "User logged in successfully",
-      accesstoken: acessToken,
-      refreshtoken: refreshToken,
+      loginToken,
       user: {
         userId: isUserNameAlreadyExist.userId,
         username: isUserNameAlreadyExist.username,

src/controllers/auth/loginToken.ts

@@ -0,0 +1,70 @@
+import { Request, Response } from "express";
+import { getDataFromRedis } from "../../redis";
+import { prisma } from "../../utils/prisma";
+import { createJwtToken } from "../../utils/createJwtToken";
+
+export const loginToken = async (req: Request, res: Response) => {
+  try {
+    const userId = req.body?.userId;
+    const token = req.body?.loginToken;
+
+    if (!token || !userId) {
+      return res.status(400).json({
+        success: false,
+        message: "token or userId is missing",
+      });
+    }
+
+    const user = await prisma.user.findUnique({
+      where: {
+        userId,
+      },
+      select: {
+        userId: true,
+        username: true,
+        publicKey: true,
+      },
+    });
+
+    if (!user) {
+      return res.status(404).json({
+        success: false,
+        message: "user not found",
+      });
+    }
+
+    const storedLoginToken = await getDataFromRedis(
+      `loginToken:${userId}`,
+      true
+    );
+
+    if (!storedLoginToken || storedLoginToken !== token) {
+      return res.status(400).json({
+        success: false,
+        message: "login token is invalid",
+      });
+    }
+
+    const accesstoken = createJwtToken(
+      user.userId,
+      user.username,
+      user.publicKey,
+      "access"
+    );
+    const refreshtoken = createJwtToken(
+      user.userId,
+      user.username,
+      user.publicKey,
+      "refresh"
+    );
+
+    return res.status(200).json({
+      success: true,
+      message: "login token verified successfully",
+      accesstoken,
+      refreshtoken,
+    });
+  } catch (error) {
+    res.status(500).json(error);
+  }
+};

src/routes/auth.ts

@@ -11,13 +11,17 @@ import {
   signupSchema,
   updateUsernameSchema,
 } from "../schemas/authSchema";
+import { loginToken } from "../controllers/auth/loginToken";
 
 export const authRouter: Router = Express.Router();
 
 authRouter.post("/signup", validateData(signupSchema), signup);
 
 authRouter.post("/login", validateData(loginSchema), login);
 
+// request for access and refresh token after login
+authRouter.post("/login/token", loginToken);
+
 authRouter.get("/verifyRoute", verifyRoute);
 
 authRouter.post("/refresh", createAccessTokenFromRefreshToken);