tony
f793b526aa
- Add OWNER_SECRET-based session: signed HMAC cookie, /api/auth/owner login, requireOwner middleware. All Tesla routes refuse 401 without it. - Bind OAuth state to a SameSite=Lax httpOnly cookie at /start, validate match in /callback with constant-time compare. Refuses unmatched callbacks. - Token store now mkdir 0700, writeFile + rename atomic, mode 0600 with defensive chmod. Owner-only on disk. - VIN masked to last 4 in responses; partner-register no longer echoes raw Tesla body to clients; coord bounds checked on send-to-nav. - Client: useTesla also tracks owner status; Connect Tesla button opens an OwnerLoginModal when not authenticated, then continues to Tesla OAuth. Conscious deferrals: - Explicit CSRF tokens on POST routes: mitigated by SameSite=Lax cookies + same-origin CORS. Will revisit if cross-origin clients land. - At-rest token encryption: deferred for single-user app; tokens are on a 0700 Dokku volume readable only by the app uid. Will add AES-GCM if we multi-tenant.
86 lines
2.9 KiB
TypeScript
86 lines
2.9 KiB
TypeScript
import { promises as fs } from 'node:fs';
|
|
import path from 'node:path';
|
|
import { fileURLToPath } from 'node:url';
|
|
import { createLogger } from './logger.js';
|
|
|
|
const log = createLogger('tesla-token-store');
|
|
|
|
export interface TeslaTokens {
|
|
accessToken: string;
|
|
refreshToken: string;
|
|
expiresAt: number; // ms epoch
|
|
scope: string;
|
|
// Optional cached vehicle metadata so we don't have to refetch on every call.
|
|
vehicleId?: string; // numeric id_s used in Fleet API URLs
|
|
vin?: string;
|
|
carType?: string; // e.g. modely
|
|
trimBadging?: string; // e.g. lrawd
|
|
connectedAt: number;
|
|
}
|
|
|
|
interface Store {
|
|
get(userId: string): Promise<TeslaTokens | null>;
|
|
set(userId: string, tokens: TeslaTokens): Promise<void>;
|
|
remove(userId: string): Promise<void>;
|
|
}
|
|
|
|
// File-backed store. Falls back to /app/data when running under Dokku (we
|
|
// will mount a Dokku storage volume on /app/data), or to ./data in dev.
|
|
const __dirname = path.dirname(fileURLToPath(import.meta.url));
|
|
const dataDir = process.env.TESLA_TOKEN_DIR
|
|
|| (process.env.NODE_ENV === 'production' ? '/app/data' : path.resolve(__dirname, '../../data'));
|
|
const tokenFile = path.join(dataDir, 'tesla-tokens.json');
|
|
|
|
let cache: Record<string, TeslaTokens> = {};
|
|
let loaded = false;
|
|
let writeLock: Promise<unknown> = Promise.resolve();
|
|
|
|
async function load(): Promise<void> {
|
|
if (loaded) return;
|
|
try {
|
|
await fs.mkdir(dataDir, { recursive: true, mode: 0o700 });
|
|
await fs.chmod(dataDir, 0o700).catch(() => {}); // tighten if it already existed
|
|
const raw = await fs.readFile(tokenFile, 'utf8');
|
|
cache = JSON.parse(raw);
|
|
log.info({ file: tokenFile, users: Object.keys(cache).length }, 'Loaded Tesla tokens');
|
|
} catch (err: any) {
|
|
if (err.code !== 'ENOENT') log.warn({ err: String(err) }, 'Failed to load Tesla tokens — starting empty');
|
|
cache = {};
|
|
}
|
|
loaded = true;
|
|
}
|
|
|
|
async function persist(): Promise<void> {
|
|
// Serialise writes so concurrent set/remove calls don't race. Write to a
|
|
// tmpfile then rename for atomicity; owner-only perms via mode + chmod.
|
|
writeLock = writeLock
|
|
.then(async () => {
|
|
await fs.mkdir(dataDir, { recursive: true, mode: 0o700 });
|
|
await fs.chmod(dataDir, 0o700).catch(() => {});
|
|
const tmp = `${tokenFile}.${process.pid}.tmp`;
|
|
await fs.writeFile(tmp, JSON.stringify(cache, null, 2), { mode: 0o600 });
|
|
await fs.chmod(tmp, 0o600).catch(() => {});
|
|
await fs.rename(tmp, tokenFile);
|
|
await fs.chmod(tokenFile, 0o600).catch(() => {});
|
|
})
|
|
.catch(err => log.error({ err: String(err) }, 'Failed to persist Tesla tokens'));
|
|
await writeLock;
|
|
}
|
|
|
|
export const teslaTokenStore: Store = {
|
|
async get(userId) {
|
|
await load();
|
|
return cache[userId] || null;
|
|
},
|
|
async set(userId, tokens) {
|
|
await load();
|
|
cache[userId] = tokens;
|
|
await persist();
|
|
},
|
|
async remove(userId) {
|
|
await load();
|
|
delete cache[userId];
|
|
await persist();
|
|
},
|
|
};
|