refactor(auth): reuse tokenHash from generateApiToken

This commit is contained in:
Orvanix
2026-03-12 18:02:03 +00:00
parent d73d13aa26
commit 5ae58a36b4
2 changed files with 2 additions and 4 deletions
@@ -8,7 +8,6 @@ import { requireAuth, requireAdmin, AuthenticatedRequest } from '@/lib/middlewar
import { prisma } from '@/lib/db';
import { RMABLogger } from '@/lib/utils/logger';
import { generateApiToken } from '@/lib/utils/api-token';
import crypto from 'crypto';
const logger = RMABLogger.create('API.Admin.Users.LoginToken');
@@ -37,8 +36,7 @@ export async function POST(
);
}
const { fullToken } = generateApiToken();
const tokenHash = crypto.createHash('sha256').update(fullToken).digest('hex');
const { fullToken, tokenHash } = generateApiToken();
await prisma.user.update({
where: { id },
+1 -1
View File
@@ -32,7 +32,7 @@ describe('Admin login token routes', () => {
authRequest = { user: { id: 'admin-1', username: 'admin', role: 'admin' }, json: vi.fn() };
requireAuthMock.mockImplementation((_req: any, handler: any) => handler(authRequest));
requireAdminMock.mockImplementation((_req: any, handler: any) => handler());
generateApiTokenMock.mockReturnValue({ fullToken: 'rmab_test_token' });
generateApiTokenMock.mockReturnValue({ fullToken: 'rmab_test_token', tokenHash: 'hash_abc123' });
});
describe('POST /api/admin/users/[id]/login-token', () => {