anonymous_github/src/core/GitHubUtils.ts

import { trace } from "@opentelemetry/api";
import { Octokit } from "@octokit/rest";

import Repository from "./Repository";
import UserModel from "./model/users/users.model";
import config from "../config";
import { RepositoryStatus } from "./types";

export function octokit(token: string) {
  return new Octokit({
    auth: token,
    request: {
      fetch: fetch,
    },
  });
}

export async function checkToken(token: string) {
  const oct = octokit(token);
  try {
    await oct.users.getAuthenticated();
    return true;
  } catch (error) {
    return false;
  }
}

export async function getToken(repository: Repository) {
  const span = trace.getTracer("ano-file").startSpan("GHUtils.getToken");
  span.setAttribute("repoId", repository.repoId);
  try {
    if (repository.model.source.accessToken) {
      // only check the token if the repo has been visited less than 10 minutes ago
      if (
        repository.status == RepositoryStatus.READY &&
        repository.model.lastView > new Date(Date.now() - 1000 * 60 * 10)
      ) {
        return repository.model.source.accessToken;
      } else if (await checkToken(repository.model.source.accessToken)) {
        return repository.model.source.accessToken;
      }
    }
    if (!repository.owner.model.accessTokens?.github) {
      const query = await UserModel.findById(repository.owner.id, {
        accessTokens: 1,
        accessTokenDates: 1,
      });
      if (query?.accessTokens) {
        repository.owner.model.accessTokens = query.accessTokens;
        repository.owner.model.accessTokenDates = query.accessTokenDates;
      }
    }
    const ownerAccessToken = repository.owner.model.accessTokens?.github;
    if (ownerAccessToken) {
      const tokenAge = repository.owner.model.accessTokenDates?.github;
      // if the token is older than 7 days, refresh it
      if (
        !tokenAge ||
        tokenAge < new Date(Date.now() - 1000 * 60 * 60 * 24 * 7)
      ) {
        const url = `https://api.github.com/applications/${config.CLIENT_ID}/token`;
        const headers = {
          Accept: "application/vnd.github+json",
          "X-GitHub-Api-Version": "2022-11-28",
        };

        const res = await fetch(url, {
          method: "PATCH",
          body: JSON.stringify({
            access_token: ownerAccessToken,
          }),
          credentials: "include",
          headers: {
            ...headers,
            Authorization:
              "Basic " +
              Buffer.from(
                config.CLIENT_ID + ":" + config.CLIENT_SECRET
              ).toString("base64"),
          },
        });
        const resBody = (await res.json()) as { token: string };
        repository.owner.model.accessTokens.github = resBody.token;
        if (!repository.owner.model.accessTokenDates) {
          repository.owner.model.accessTokenDates = {
            github: new Date(),
          };
        } else {
          repository.owner.model.accessTokenDates.github = new Date();
        }
        await repository.owner.model.save();
        return resBody.token;
      }
      const check = await checkToken(ownerAccessToken);
      if (check) {
        repository.model.source.accessToken = ownerAccessToken;
        return ownerAccessToken;
      }
    }
    return config.GITHUB_TOKEN;
  } finally {
    span.end();
  }
}