fix: authorization error

Author: winverse

.gitignore

@@ -7,4 +7,4 @@
 .env.*
 !**/**/.env.example
 
-.vscode
+.vscode

infrastructure/Pulumi.production.yaml

@@ -1,4 +1,4 @@
 config:
   aws:region: ap-northeast-2
   velog:DOCKER_ENV: production
-  velog:target: server
+  velog:target: server,web

infrastructure/Pulumi.stage.yaml

@@ -1,4 +1,4 @@
 config:
   aws:region: ap-northeast-2
   velog:DOCKER_ENV: stage
-  velog:target: server
+  velog:target: web

packages/velog-server/src/common/plugins/global/authPlugin.ts

@@ -19,31 +19,35 @@ const authPlugin: FastifyPluginAsync = async (fastify) => {
     const authorization = request.headers['authorization']
 
     try {
-      if (!accessToken && authorization) {
+      if (!accessToken && !!authorization && typeof authorization === 'string') {
         accessToken = authorization.split('Bearer ')[1]
       }
 
       if (!accessToken && !refreshToken) return
 
-      if (accessToken && refreshToken) {
+      if (accessToken) {
         const accessTokenData = await jwt.decodeToken<AccessTokenData>(accessToken)
 
         const diff = accessTokenData.exp * 1000 - new Date().getTime()
         // refresh token when life < 30mins
         if (diff < Time.ONE_MINUTE_IN_MS * 30 && refreshToken) {
           await userService.restoreToken({ request, reply })
         }
+
+        request.user = { id: accessTokenData.user_id }
+        return
       }
 
       if (!accessToken && refreshToken) {
         const tokens = await userService.restoreToken({ request, reply })
         accessToken = tokens.accessToken
-      }
 
-      if (!accessToken) return
+        const accessTokenData = await jwt.decodeToken<AccessTokenData>(accessToken)
+        request.user = { id: accessTokenData.user_id }
+        return
+      }
 
-      const accessTokenData = await jwt.decodeToken<AccessTokenData>(accessToken)
-      request.user = { id: accessTokenData.user_id }
+      request.user = null
     } catch (e) {
       console.log('accessToken', accessToken)
       console.log('authPlugin error', e)
@@ -55,10 +59,9 @@ const authPlugin: FastifyPluginAsync = async (fastify) => {
 
           const accessTokenData = await jwt.decodeToken<AccessTokenData>(accessToken)
           request.user = { id: accessTokenData.user_id }
-        } else {
-          throw new Error()
         }
       } catch (error) {
+        console.log('refresh token error', error)
         const cookie = container.resolve(CookieService)
         cookie.clearCookie(reply, 'access_token')
         cookie.clearCookie(reply, 'refresh_token')

packages/velog-server/src/services/UserService/index.ts

@@ -123,7 +123,7 @@ export class UserService implements Service {
   public async updateLastAccessedAt(userId?: string): Promise<void> {
     if (!userId) return
     try {
-      await this.db.userProfile.update({
+      await this.db.userProfile.updateMany({
         where: {
           fk_user_id: userId,
         },

packages/velog-web/package.json

@@ -43,7 +43,7 @@
     "html-react-parser": "^5.0.6",
     "inquirer": "^9.2.7",
     "nanoid": "^4.0.2",
-    "next": "^14.1.0",
+    "next": "14.1.0",
     "postcss-flexbugs-fixes": "^5.0.2",
     "postcss-preset-env": "^8.5.0",
     "prismjs": "^1.29.0",

packages/velog-web/src/graphql/helpers/generated.ts

@@ -104,6 +104,21 @@ export type CreateNotificationInput = {
   type: NotificationType
 }
 
+export type EditPostInput = {
+  body: Scalars['String']['input']
+  id: Scalars['ID']['input']
+  is_markdown: Scalars['Boolean']['input']
+  is_private: Scalars['Boolean']['input']
+  is_temp: Scalars['Boolean']['input']
+  meta: Scalars['JSON']['input']
+  series_id?: InputMaybe<Scalars['ID']['input']>
+  tags: Array<Scalars['String']['input']>
+  thumbnail?: InputMaybe<Scalars['String']['input']>
+  title: Scalars['String']['input']
+  token?: InputMaybe<Scalars['String']['input']>
+  url_slug: Scalars['String']['input']
+}
+
 export type FeedPostsInput = {
   limit?: InputMaybe<Scalars['PositiveInt']['input']>
   offset?: InputMaybe<Scalars['Int']['input']>
@@ -187,16 +202,17 @@ export type Mutation = {
   acceptIntegration: Scalars['String']['output']
   confirmChangeEmail: Maybe<Scalars['Void']['output']>
   createNotification: Notification
+  editPost: Post
   follow: Maybe<Scalars['Boolean']['output']>
   initiateChangeEmail: Maybe<Scalars['Void']['output']>
-  likePost: Maybe<Post>
+  likePost: Post
   logout: Maybe<Scalars['Void']['output']>
   readAllNotifications: Maybe<Scalars['Void']['output']>
   readNotification: Maybe<Scalars['Void']['output']>
   removeAllNotifications: Maybe<Scalars['Void']['output']>
   sendMail: Maybe<SendMailResponse>
   unfollow: Maybe<Scalars['Boolean']['output']>
-  unlikePost: Maybe<Post>
+  unlikePost: Post
   unregister: Maybe<Scalars['Void']['output']>
   updateAbout: Maybe<UserProfile>
   updateEmailRules: Maybe<UserMeta>
@@ -205,6 +221,7 @@ export type Mutation = {
   updateSocialInfo: Maybe<UserProfile>
   updateThumbnail: Maybe<UserProfile>
   updateVelogTitle: Maybe<VelogConfig>
+  writePost: Post
 }
 
 export type MutationConfirmChangeEmailArgs = {
@@ -215,6 +232,10 @@ export type MutationCreateNotificationArgs = {
   input: CreateNotificationInput
 }
 
+export type MutationEditPostArgs = {
+  input: EditPostInput
+}
+
 export type MutationFollowArgs = {
   input: FollowInput
 }
@@ -271,6 +292,10 @@ export type MutationUpdateVelogTitleArgs = {
   input: UpdateVelogTitleInput
 }
 
+export type MutationWritePostArgs = {
+  input: WritePostInput
+}
+
 export type Notification = {
   action: Scalars['JSON']['output']
   action_id: Maybe<Scalars['ID']['output']>
@@ -611,6 +636,7 @@ export type User = {
   id: Scalars['ID']['output']
   is_certified: Scalars['Boolean']['output']
   is_followed: Scalars['Boolean']['output']
+  is_trusted: Scalars['Boolean']['output']
   profile: UserProfile
   series_list: Array<Series>
   updated_at: Scalars['DateTimeISO']['output']
@@ -656,6 +682,20 @@ export type VelogConfig = {
   title: Maybe<Scalars['String']['output']>
 }
 
+export type WritePostInput = {
+  body: Scalars['String']['input']
+  is_markdown: Scalars['Boolean']['input']
+  is_private: Scalars['Boolean']['input']
+  is_temp: Scalars['Boolean']['input']
+  meta: Scalars['JSON']['input']
+  series_id?: InputMaybe<Scalars['ID']['input']>
+  tags: Array<Scalars['String']['input']>
+  thumbnail?: InputMaybe<Scalars['String']['input']>
+  title: Scalars['String']['input']
+  token?: InputMaybe<Scalars['String']['input']>
+  url_slug: Scalars['String']['input']
+}
+
 export type AdsQueryVariables = Exact<{
   input: AdsInput
 }>

packages/velog-web/src/prefetch/getCurrentUser.ts

@@ -6,6 +6,7 @@ export default async function getCurrentUser() {
   try {
     const headers = {}
     const token = getAccessToken()
+
     if (token) {
       Object.assign(headers, { authorization: `Bearer ${token.value}` })
     }