fluxer/fluxer_api/src/api/auth/AuthModel.ts

// SPDX-License-Identifier: AGPL-3.0-or-later

import {maskIpForDisplay} from '@fluxer/ip_utils/src/IpAddress';
import type {AuthSessionResponse} from '@fluxer/schema/src/domains/auth/AuthSchemas';
import {uint8ArrayToBase64} from 'uint8array-extras';
import {Config} from '../Config';
import {Logger} from '../Logger';
import {getInstanceConfigRepository} from '../middleware/ServiceSingletons';
import type {AuthSession} from '../models/AuthSession';
import {getLocationLabelFromIp} from '../utils/IpUtils';
import {resolveSessionClientInfo} from '../utils/SessionClientIdentity';

const DEV_FALLBACK_AUTH_SESSION_LOCATION = 'Stockholm, Stockholm County, Sweden';

function shouldUseFallbackAuthSessionLocation(): boolean {
	return Config.dev.testModeEnabled || Config.nodeEnv === 'development';
}

async function resolveAuthSessionLocation(session: AuthSession): Promise<string | null> {
	try {
		const location = await getLocationLabelFromIp(session.clientIp);
		return location ?? (shouldUseFallbackAuthSessionLocation() ? DEV_FALLBACK_AUTH_SESSION_LOCATION : null);
	} catch (error) {
		Logger.warn({error, clientIp: session.clientIp}, 'Failed to resolve location from IP');
		return shouldUseFallbackAuthSessionLocation() ? DEV_FALLBACK_AUTH_SESSION_LOCATION : null;
	}
}

export async function mapAuthSessionsToResponse({
	authSessions,
	currentSessionId,
}: {
	authSessions: Array<AuthSession>;
	currentSessionId?: Uint8Array;
}): Promise<Array<AuthSessionResponse>> {
	const sortedSessions = authSessions.toSorted((a, b) => {
		const aTime = a.approximateLastUsedAt?.getTime() || 0;
		const bTime = b.approximateLastUsedAt?.getTime() || 0;
		return bTime - aTime;
	});
	const locationResults = await Promise.allSettled(
		sortedSessions.map((session) => resolveAuthSessionLocation(session)),
	);
	const {branding} = await getInstanceConfigRepository().getAppPublicConfig();
	return sortedSessions.map((authSession, index): AuthSessionResponse => {
		const locationResult = locationResults[index];
		const clientLocation = locationResult?.status === 'fulfilled' ? locationResult.value : null;
		const clientInfo = resolveSessionClientInfo({
			userAgent: authSession.clientUserAgent,
			reportedOs: authSession.clientOs ?? null,
			productName: branding.product_name,
		});
		const idHash = uint8ArrayToBase64(authSession.sessionIdHash, {urlSafe: true});
		const isCurrent = currentSessionId ? Buffer.compare(authSession.sessionIdHash, currentSessionId) === 0 : false;
		return {
			id_hash: idHash,
			client_info: {
				platform: clientInfo.platform,
				os: clientInfo.os,
				browser: clientInfo.browser,
				device: clientInfo.device,
				location: clientLocation
					? {
							city: clientLocation.split(',').at(0)?.trim() || null,
							region: clientLocation.split(',').at(1)?.trim() || null,
							country: clientLocation.split(',').at(2)?.trim() || null,
						}
					: null,
			},
			masked_ip: maskIpForDisplay(authSession.clientIp),
			approx_last_used_at: authSession.approximateLastUsedAt?.toISOString() || null,
			current: isCurrent,
		};
	});
}