[BK]: Add Session Management (API and Middleware) #13

KevinLatino · 2024-12-12T15:24:38Z

Important

Before applying, please read the Contributors Guide. Following the guide increases your chances of being assigned to this task.

Description Store user sessions in the database and validate them in middleware.

Entity Definition

import { Entity, PrimaryGeneratedColumn, Column, ManyToOne, CreateDateColumn, UpdateDateColumn } from 'typeorm';
import { User } from './User';

@Entity('sessions')
export class Session {
  @PrimaryGeneratedColumn()
  id: number;

  @ManyToOne(() => User)
  user: User;

  @Column({ unique: true })
  token: string;

  @Column()
  expiresAt: Date;

  @CreateDateColumn()
  createdAt: Date;

  @UpdateDateColumn()
  updatedAt: Date;
}

Middleware Implementation

import { Request, Response, NextFunction } from 'express';
import SessionService from '@/services/SessionService';

interface AuthenticatedRequest extends Request {
  user?: { id: number; role: string };
}

export const sessionMiddleware = async (
  req: AuthenticatedRequest,
  res: Response,
  next: NextFunction
): Promise<void> => {
  const token = req.headers.authorization?.split(' ')[1];
  if (!token) {
    res.status(401).json({ message: 'Authentication token is missing' });
    return;
  }

  try {
    const sessionService = new SessionService();
    const session = await sessionService.validateSession(token);

    if (!session) {
      res.status(401).json({ message: 'Session expired or invalid' });
      return;
    }

    req.user = { id: session.user.id, role: session.user.role };
    next();
  } catch (error) {
    res.status(500).json({ message: 'Internal server error' });
  }
};

Tasks

Create a Session entity in TypeORM.
Implement SessionService with methods to:
- Validate session tokens.
- Create new sessions upon login.
Implement sessionMiddleware to validate session tokens and attach user data to requests.

Acceptance Criteria

Sessions are stored in the database and validated in middleware.
Middleware rejects expired or invalid tokens with a 401 response.
All tests pass with >80% code coverage.

The text was updated successfully, but these errors were encountered:

Supa-mega · 2024-12-12T15:26:46Z

I’d like to help with this.

Shukazuby · 2024-12-12T15:45:03Z

I am Zubaidat, a backend developer with expertise in TypeORM and secure session handling.

Approach to Solve the Issue:

I will create a Session entity in TypeORM and implement a SessionService with methods for validating session tokens and creating new sessions during login. The sessionMiddleware will validate tokens and attach user data to requests. The implementation will follow best practices for database efficiency and security.

ETA:
I can complete this task in 48hrs , including development and testing.

ShantelPeters · 2024-12-12T15:55:33Z

May I pick this up?

I am full stack developer with strong experience in Cairo , solidity ,JavaScript,typescript ,react , python etc… looking forward to contributing as this would be my first time contributing to this project…

ETA : 3 days

Amarjeet325 · 2024-12-12T16:01:56Z

Is it okay if I tackle this?

diegoTech14 · 2024-12-12T16:02:33Z

Hello @KevinLatino my name is Diego Duarte Fernández, I'm a software engineer from Costa Rica and Dojo Coding member, I have experience with technologies like Express, Prisma ORM, TypeScript, I've created several APIs using ORMS, tokens and middlewares also I'm maintainer of SafeTrust project which is a security deposit service project. 🤖

I would love to tackle this issue and contribute for your amazing project.

Step by step for this issue:

Follow and improve entity: I will follow the entity definition and if it possible improve it to ensure that works great.
I will implement the middleware to process the authentication/authorization.
I'm going to make sure that the token is created every time you log in.
Testing: I will test the middleware and the token to ensure that everything is okay.
If it is needed I will document the middleware and the token process management.

ETA: 72 hours
Thanks for your consideration.

Best regards, Diego Duarte Fernández. ✨

blessingbytes · 2024-12-12T16:06:46Z

i would love to be given the opportunity to tackle this task

Benjtalkshow · 2024-12-12T16:16:18Z

I am a Full Stack Developer with a strong background in blockchain and extensive experience in Next.js/React, TypeScript, and Rust. I’ve made over 49 contributions to over 17 projects in the OnlyDust ecosystem, solving complex issues and delivering efficient, scalable solutions.

I can handle this task.
ETA is 3days.

Michaelkingsdev · 2024-12-12T16:17:36Z

I can handle this particular task.

RajeshRk18 · 2024-12-12T16:18:19Z

About me

I am a backend developer having experience in Typescript, Rust and Python. I have worked on APIs and various middleware projects.

How I will solve this issue?

Here is how I will solve the issue:

Track sessions with user, unique token, and expiration details.
Generate secure, time-limited tokens when users authenticate.
Validate tokens, and block unauthorized access
Verify credentials, create sessions, and manage login/logout flows.
Implement token validation, role-based access, and prevent unauthorized entry.

ETA: 2days

psychemist · 2024-12-12T16:24:33Z

Hi. I am a fullstack web developer and a recent alumni of Web3Bridge, the largest and most sought after blockchain developer community in Africa. I am a new contributor to OnlyDust and would love to take on this task to increase my knowledge base and contribute to open source projects.

I would solve this task by:

Creating a Session entity by importing the object from TypeORM
Implementing the SessionService and sessionMiddleware that create and validate session tokens.
Running tests to ensure full coverage before submitting my pull request.

I aim to complete this task within 3 hours after being assigned and setting up my development environment.

Thank you for the opportunity and I look forward to working with you.

od-hunter · 2024-12-12T16:26:26Z

Hi, please can I be assigned this please? This would be my first time contributing to this project and I would love to be the given the opportunity to contribute. I have experience in html, css, JavaScript,TypeScript and solidity, and Cairo.

To solve this issue, I’ll take the following steps:
1.⁠ ⁠I’ll define a TypeORM entity to store session data, including a token and expiration time.
2.⁠ ⁠⁠I’ll generate a JWT token, store it in the sessions table, and set an expiration date. Then, I’ll validate the session by verifying the token and checking the session's expiration.
3.⁠ ⁠⁠I’ll extract the token from the authorization header, then call SessionService to validate the token. If valid, I’ll attach user data (id, role) to the request object; otherwise, I’ll return a 401 unauthorized response.
4.⁠ ⁠⁠Lastly, I’ll apply sessionMiddleware to routes that require authentication, to ensure only authenticated users can access them.

ETA: 3days
Kindly assign me please, I’m ready to work.

gregemax · 2024-12-12T16:43:11Z

May I be assigned to this task? I have experience in backend development with TypeScript, TypeORM, and implementing middleware. I’m confident in creating the Session entity, SessionService, and sessionMiddleware to ensure secure and efficient session management. I’ll also ensure test coverage exceeds 80%.

mimisavage · 2024-12-12T17:12:24Z

Can I work on this, please?

Nityam573 · 2024-12-12T18:14:05Z

May I take care of this?

1nonlypiece · 2024-12-12T18:31:25Z

Can I take care of this issue?

BrunoAmbricca · 2024-12-12T19:28:59Z

I will learn the existing code and research the best approach for this issue

mariocodecr · 2024-12-12T20:44:14Z

Hii! My name is Mario Araya, I’m a Software Developer with 2+ years of experience. I have worked with backend technologies such as Cairo, Java, and C#, as well as frontend development using React, NextJS, and JavaScript/TypeScript. I’ve made contributions to open-source projects, completed a Starknet Bootcamp, exercises on NodeGuardians, finished Starklings, and participated in multiple hackathons. I’m also a member of the Dojo Coding community here in Costa Rica.

I will create a Session entity using typeorm with fields for id, user, token, expiresAt, and timestamp columns. Implement a SessionService with methods to validate session tokens by checking their presence and expiration in the database and to create new sessions during user login. Develop a sessionMiddleware to extract and validate the Authorization header token using the service, rejecting requests with invalid or expired tokens and attaching authenticated user data to the request object for valid sessions.

ikezuby2012 · 2024-12-12T21:16:06Z

Hello, my name is nnubia nzube, I'm a full-stack developer with nearly 4 years of experience working with JavaScript, TypeScript, c#, Express.js, and recently exploring Cairo for blockchain development. I’m passionate about building robust and scalable applications while ensuring clean and maintainable code.

For this issue, my approach would be to create a middleware that:

Checks if a token is present in the request headers.
Validates the token for authenticity and expiration.
Stores the validated token in the session for future use.

ETA: 3 days

emarc99 · 2024-12-12T22:00:57Z

Could I take over this issue? ETA 3 days

kayceeDev · 2024-12-12T22:10:40Z

Can I tackle this one?

I am a senior backend engineer.
I will utilize my experience in Nest.js and typescript to build a robust middleware for session service,

I will utilize my database skills to save the session in a database with expiry periods.

My ETA: 3 Days

sonkeydotcom · 2024-12-12T22:44:20Z

Hi. Id like to take this task

olisaagbafor · 2024-12-12T23:01:07Z

Hello StarShop Team,

I’m Olisa Agbafor, a backend developer with expertise in building secure APIs, middleware, and session management using Node.js, Express, and TypeORM. I would love to contribute to this task.

My Approach:
Entity Definition:

Define the Session entity with proper relationships to the User entity, ensuring unique constraints on tokens and timestamps for creation and updates.
SessionService Implementation:

Create methods to validate session tokens and generate new sessions upon user login, ensuring robust security measures.
Middleware Development:

Implement sessionMiddleware to validate session tokens and attach user data to requests. Handle errors for expired or invalid tokens with proper responses.
Testing:

Write comprehensive unit and integration tests with Jest to ensure all scenarios, including expired and invalid tokens, are covered. Ensure >80% test coverage.
ETA:
I estimate the task will be completed in 3 days, including testing and documentation.

Looking forward to your approval and contributing to the project. Thank you!

Best regards,
Olisa Agbafor

josephpdf · 2024-12-12T23:39:46Z

Hi @KevinLatino
I'm Joseph Poveda, a member of the Dojo Coding community, I have experience in different programming languages and have contributed to different OSS projects.
To solve the issue I propose

Create the Session Entity:
- Use the provided TypeORM structure to define the Session entity.
- Ensure all necessary fields like id, user, token, expiresAt, createdAt, and updatedAt are correctly implemented.
Implement the SessionService:
- Develop methods to validate session tokens and create new sessions upon login.
- Integrate database queries to fetch and verify session data.
Develop Middleware:
- Use the sessionMiddleware to check the token's validity.
- Attach user information to the request for further processing.
Test Thoroughly:
- Write unit tests to validate middleware functionality and service methods, ensuring >80% code coverage.
Submit PR:
- Ensure code follows guidelines, passes tests, and document the implementation in the README.

khayss · 2024-12-12T23:44:16Z

I'm a fullstack developer with preference for backends and smart contracts. I've built and collaborated on backends written in Rust and NodeJS, including production grade servers.

Here are the step I'll take to tackle this issue.

Create a Session entity in TypeORM.
Implement a service for the created entity. This will handle validations of sessions and creation of new ones.
Implement a strong middleware to validate sessions and inject user data to requests.

I'm looking forward to working on this issue.

DuendexCR · 2024-12-13T00:21:41Z

I’d like to work on this.

caxtonacollins · 2024-12-13T08:03:45Z

I am a Full Stack Developer with two years of professional experience, specializing in web3. I have strong background in blockchain and extensive experience in Next.js/React, TypeScript, Cairo and Rust.

To solve this, I'll first define session entities using the provided typeORM models, will then implement session service which wil include session token validation and creation of new sessions upto login.
I will also implement session middleware and write unit test for session methods like validateSession and createSession.

ETA is 2days.

akintewe · 2024-12-13T09:13:05Z

Hello, may I be assigned to this task? I have experience in backend development with TypeScript, TypeORM, and implementing middleware.
I have read the requirements and i have worked on sessions in the past which would make it easier for me to tackle.
I’m confident in creating the Session entity, SessionService, and sessionMiddleware to ensure secure and efficient session management. My ETA is 24 hours

Jagadeeshftw · 2024-12-13T09:30:06Z

I'd love to work on this!

3th-Enjay · 2024-12-13T11:17:58Z

Is this issue still available? i understand what needs to be done and can handle it

DioChuks · 2024-12-13T11:28:56Z

Can I take this issue?

Ahmad940 · 2024-12-13T11:51:02Z

I’d like to help with this, experienced typescript and backend developer,
I will be creating a new middleware folder to abstract aware middlewares, and apply to all route, and service for validation the user session retrieved from header.

Dorcas18 · 2024-12-13T12:09:44Z

May I handle this issue?

ekumamatthew · 2024-12-13T12:30:17Z

I'd like to take this issue.

Joewizy · 2024-12-13T13:26:10Z

Could I be assigned to this?

ryzen-xp · 2024-12-14T11:02:13Z

Can I attempt this issue?

martinvibes · 2024-12-14T12:28:12Z

i'm a frontend dev and blockchain dev
May I try my hand at this?
i would love to work on this and get it done

vestor-dev · 2024-12-14T12:32:47Z

Could I be assigned to this?
Would love to tackle this!
kindly assign :)

Amarjeet325 · 2024-12-14T13:41:11Z

Hi , I am a full stack developer is a versatile professional skilled in both front-end and back-end development, capable of designing user interfaces, building robust server-side applications, and managing databases.
Can I take this from here? Thank you !

Villarley · 2024-12-15T04:03:26Z

hey @josephpdf
Task assigned to you. Let me know if you need further clarification or additional support!😊

Here is our telegram group, please join https://t.me/starshopcr

KevinLatino added good first issue Good for newcomers ODHACK11 Backend labels Dec 12, 2024

Villarley changed the title ~~Add Session Management (API and Middleware)~~ [BK]: Add Session Management (API and Middleware) Dec 13, 2024

onlydustapp bot assigned josephpdf Dec 15, 2024

josephpdf mentioned this issue Dec 17, 2024

Feature/add session management #23

Merged

6 tasks

Villarley closed this as completed in #23 Dec 22, 2024

[BK]: Add Session Management (API and Middleware) #13

[BK]: Add Session Management (API and Middleware) #13

Comments

KevinLatino commented Dec 12, 2024

Description Store user sessions in the database and validate them in middleware.

Entity Definition

Middleware Implementation

Tasks

Acceptance Criteria

Supa-mega commented Dec 12, 2024

Shukazuby commented Dec 12, 2024

ShantelPeters commented Dec 12, 2024 • edited Loading

Amarjeet325 commented Dec 12, 2024

diegoTech14 commented Dec 12, 2024

Step by step for this issue:

blessingbytes commented Dec 12, 2024

Benjtalkshow commented Dec 12, 2024

Michaelkingsdev commented Dec 12, 2024

RajeshRk18 commented Dec 12, 2024 • edited Loading

About me

How I will solve this issue?

psychemist commented Dec 12, 2024

od-hunter commented Dec 12, 2024

gregemax commented Dec 12, 2024

mimisavage commented Dec 12, 2024

Nityam573 commented Dec 12, 2024

1nonlypiece commented Dec 12, 2024

BrunoAmbricca commented Dec 12, 2024 • edited Loading

mariocodecr commented Dec 12, 2024

ikezuby2012 commented Dec 12, 2024

emarc99 commented Dec 12, 2024

kayceeDev commented Dec 12, 2024 • edited Loading

sonkeydotcom commented Dec 12, 2024

olisaagbafor commented Dec 12, 2024

josephpdf commented Dec 12, 2024

khayss commented Dec 12, 2024

DuendexCR commented Dec 13, 2024

caxtonacollins commented Dec 13, 2024

akintewe commented Dec 13, 2024

Jagadeeshftw commented Dec 13, 2024

3th-Enjay commented Dec 13, 2024

DioChuks commented Dec 13, 2024

Ahmad940 commented Dec 13, 2024

Dorcas18 commented Dec 13, 2024

ekumamatthew commented Dec 13, 2024

Joewizy commented Dec 13, 2024

ryzen-xp commented Dec 14, 2024

martinvibes commented Dec 14, 2024

vestor-dev commented Dec 14, 2024

Amarjeet325 commented Dec 14, 2024

Villarley commented Dec 15, 2024

ShantelPeters commented Dec 12, 2024 •

edited

Loading

RajeshRk18 commented Dec 12, 2024 •

edited

Loading

BrunoAmbricca commented Dec 12, 2024 •

edited

Loading

kayceeDev commented Dec 12, 2024 •

edited

Loading