feat(web): token never expiration

web/crux-ui/i18n.json

@@ -14,7 +14,7 @@
     "/auth/settings/edit-profile": ["settings"],
     "/auth/settings/change-password": ["settings"],
     "/auth/settings/new-password": ["settings"],
-    "/auth/settings/tokens": ["settings"],
+    "/auth/settings/tokens": ["settings", "tokens"],
     "/auth/verify": ["verify"],
     "/projects": ["projects"],
     "/projects/[projectId]": ["projects", "versions", "images", "deployments"],

web/crux-ui/src/components/settings/create-token-card.tsx

@@ -14,7 +14,7 @@ import { useFormik } from 'formik'
 import useTranslation from 'next-translate/useTranslation'
 import { MutableRefObject } from 'react'
 
-const EXPIRATION_VALUES = [30, 60, 90]
+const EXPIRATION_VALUES = [30, 60, 90, 0]
 
 interface CreateTokenCardProps {
   className?: string
@@ -81,7 +81,7 @@ const CreateTokenCard = (props: CreateTokenCardProps) => {
           className="text-bright"
           choices={EXPIRATION_VALUES}
           selection={formik.values.expirationInDays}
-          converter={it => t('common:days', { days: it })}
+          converter={it => (it === 0 ? t('common:never') : t('common:days', { days: it }))}
           onSelectionChange={it => {
             formik.setFieldValue('expirationInDays', it, false)
           }}

web/crux-ui/src/pages/auth/settings/tokens.tsx

@@ -87,7 +87,7 @@ const TokensPage = (props: TokensPageProps) => {
   const itemTemplate = (item: GeneratedToken) => [
     <a>{item.name}</a>,
     <a>{utcDateToLocale(item.createdAt)}</a>,
-    <a>{utcDateToLocale(item.expiresAt)}</a>,
+    <a>{item.expiresAt ? utcDateToLocale(item.expiresAt) : t('common:never')}</a>,
     <div className="flex flex-row justify-center">
       <Image
         className="cursor-pointer"

web/crux-ui/src/validations/token.ts

@@ -4,5 +4,5 @@ import { nameRule } from './common'
 // eslint-disable-next-line import/prefer-default-export
 export const generateTokenSchema = yup.object().shape({
   name: nameRule.required(),
-  expirationInDays: yup.number().required(),
+  expirationInDays: yup.number().min(0).required(),
 })

web/crux/prisma/migrations/20230626125151_token_expiration_optional/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "Token" ALTER COLUMN "expiresAt" DROP NOT NULL;

web/crux/prisma/schema.prisma

@@ -28,12 +28,12 @@ model Team {
 }
 
 model Token {
-  id        String   @id @default(uuid()) @db.Uuid
-  userId    String   @db.Uuid
-  name      String   @db.VarChar(70)
-  createdAt DateTime @default(now()) @db.Timestamptz(6)
-  expiresAt DateTime @db.Timestamptz(6)
-  nonce     String   @db.Uuid
+  id        String    @id @default(uuid()) @db.Uuid
+  userId    String    @db.Uuid
+  name      String    @db.VarChar(70)
+  createdAt DateTime  @default(now()) @db.Timestamptz(6)
+  expiresAt DateTime? @db.Timestamptz(6)
+  nonce     String    @db.Uuid
 
   @@unique([userId, name, nonce])
 }

web/crux/src/app/token/pipes/token.pipe.ts

@@ -5,7 +5,7 @@ import { GenerateTokenDto } from '../token.dto'
 @Injectable()
 export default class TokenValidationPipe implements PipeTransform {
   async transform(req: GenerateTokenDto) {
-    if (req.expirationInDays <= 0) {
+    if (req.expirationInDays < 0) {
       throw new CruxBadRequestException({
         property: 'expirationInDays',
         value: req.expirationInDays,

web/crux/src/app/token/token.dto.ts

@@ -10,7 +10,7 @@ export class TokenDto {
 
   @Type(() => Date)
   @IsDate()
-  expiresAt: Date
+  expiresAt?: Date
 
   @Type(() => Date)
   @IsDate()
@@ -22,7 +22,7 @@ export class GenerateTokenDto {
   name: string
 
   @IsInt()
-  @Min(1)
+  @Min(0)
   expirationInDays: number
 }
 

web/crux/src/app/token/token.service.ts

@@ -15,9 +15,8 @@ export default class TokenService {
 
   async generateToken(req: GenerateTokenDto, identity: Identity): Promise<GeneratedTokenDto> {
     const nonce = uuid()
-    const expirationDate = new Date(Date.now())
-    expirationDate.setDate(expirationDate.getDate() + req.expirationInDays)
-    this.logger.verbose(`Token expires at ${expirationDate.toISOString()}`)
+    const expirationDate = req.expirationInDays === 0 ? null : TokenService.getExpirationDate(req.expirationInDays)
+    this.logger.verbose(expirationDate ? `Token expires at ${expirationDate.toISOString()}` : 'Token never expries')
 
     const payload: AuthPayload = {
       sub: identity.id,
@@ -33,7 +32,9 @@ export default class TokenService {
       },
     })
 
-    const jwt = this.jwtService.sign({ exp: expirationDate.getTime() / 1000, data: payload })
+    const jwt = this.jwtService.sign(
+      expirationDate ? { exp: expirationDate.getTime() / 1000, data: payload } : { data: payload },
+    )
 
     return this.mapper.generatedTokenToDto(newToken, jwt)
   }
@@ -66,4 +67,10 @@ export default class TokenService {
       },
     })
   }
+
+  private static getExpirationDate(days: number): Date {
+    const expirationDate = new Date(Date.now())
+    expirationDate.setDate(expirationDate.getDate() + days)
+    return expirationDate
+  }
 }