fix: implement password grant correctly

Author: jankapunkt

databases/memory/index.js

@@ -15,7 +15,7 @@ app.use(bodyParser.urlencoded({ extended: false }));
 
 app.post('/token', app.oauth.token());
 
-app.use('/secret', app.oauth.authorize(), function(req, res) {
+app.use('/secret', app.oauth.authenticate(), function(req, res) {
  console.debug('secret')
  res.send('Secret area');
 });

databases/memory/model.js

@@ -16,6 +16,10 @@ function InMemoryCache() {
  */
 
 InMemoryCache.prototype.dump = function() {
+ this.users.length = 0;
+ this.clients.length = 0;
+ this.accessToken.clear();
+ this.refreshToken.clear();
  console.log('clients', this.clients);
  console.log('tokens', this.tokens);
  console.log('users', this.users);
@@ -26,23 +30,18 @@ InMemoryCache.prototype.dump = function() {
  */
 
 InMemoryCache.prototype.getAccessToken = function(bearerToken) {
- let tokens = this.tokens.filter(function(token) {
- return token.accessToken === bearerToken;
- });
-
- return tokens.length ? tokens[0] : false;
+ const entry = { ...this.accessToken.get(bearerToken) };
+ if (!entry) return null;
+ entry.user = this.users.find(u => u.id === entry.userId);
+ return entry
 };
 
 /**
  * Get refresh token.
  */
 
 InMemoryCache.prototype.getRefreshToken = function(bearerToken) {
- let tokens = this.tokens.filter(function(token) {
- return token.refreshToken === bearerToken;
- });
-
- return tokens.length ? tokens[0] : false;
+ return this.refreshToken.get(bearerToken);
 };
 
 /**
@@ -51,9 +50,10 @@ InMemoryCache.prototype.getRefreshToken = function(bearerToken) {
 
 InMemoryCache.prototype.getClient = function(clientId, clientSecret) {
  let clients = this.clients.filter(function(client) {
- return client.clientId === clientId && client.clientSecret === clientSecret;
+ return clientSecret !== null
+ ? client.clientId === clientId && client.clientSecret === clientSecret
+ : client.clientId === clientId;
  });
-
  return clients.length ? clients[0] : false;
 };
 
@@ -87,14 +87,6 @@ InMemoryCache.prototype.saveToken = function(token, client, user) {
  return token;
 };
 
-InMemoryCache.prototype.saveAuthorizationCode = function (code, client, user) {
- this.authCodes.push({ code, client, user });
-};
-
-InMemoryCache.prototype.getAuthorizationCode = function (authorizationCode) {
- return this.authCodes.find(doc => doc.code.authorization_code === authorizationCode);
-};
-
 /*
  * Get user.
  */