Differential D7000 Diff 23525 keyserver/src/cron/compare-users.js

Changeset View

Standalone View

keyserver/src/cron/compare-users.js

	// @flow			// @flow
	import { getRustAPI } from 'rust-node-addon';			import { getRustAPI } from 'rust-node-addon';

	import { deleteCookies } from '../deleters/cookie-deleters.js';			import { deleteCookies } from '../deleters/cookie-deleters.js';
	import { fetchNativeCookieIDsForUserIDs } from '../fetchers/cookie-fetchers.js';			import { fetchCookieIDsToInvalidateToPopulateIdentityService } from '../fetchers/cookie-fetchers.js';
	import { fetchAllUserIDs } from '../fetchers/user-fetchers.js';			import { fetchAllUserIDs } from '../fetchers/user-fetchers.js';

	async function compareMySQLUsersToIdentityService(): Promise<void> {			async function compareMySQLUsersToIdentityService(): Promise<void> {
	const [allUserIDs, rustAPI] = await Promise.all([			const [allUserIDs, rustAPI] = await Promise.all([
	fetchAllUserIDs(),			fetchAllUserIDs(),
	getRustAPI(),			getRustAPI(),
	]);			]);
	const userComparisonResult = await rustAPI.compareUsers(allUserIDs);			const userComparisonResult = await rustAPI.compareUsers(allUserIDs);
	const { usersMissingFromKeyserver, usersMissingFromIdentity } =			const { usersMissingFromKeyserver, usersMissingFromIdentity } =
	userComparisonResult;			userComparisonResult;

	if (usersMissingFromKeyserver.length > 0) {			if (usersMissingFromKeyserver.length > 0) {
	console.warn(			console.warn(
	"found users in identity service that aren't in MySQL! " +			"found users in identity service that aren't in MySQL! " +
	JSON.stringify(usersMissingFromKeyserver),			JSON.stringify(usersMissingFromKeyserver),
	);			);
	}			}
	if (usersMissingFromIdentity.length === 0) {			if (usersMissingFromIdentity.length === 0) {
	return;			return;
	}			}
	const cookieIDs = await fetchNativeCookieIDsForUserIDs(			const cookieIDs = await fetchCookieIDsToInvalidateToPopulateIdentityService(
	usersMissingFromIdentity,			usersMissingFromIdentity,
	);			);
	if (cookieIDs.length === 0) {			if (cookieIDs.length === 0) {
	return;			return;
	}			}

	// By deleting a cookie associated with a user's device, we trigger an			// By deleting a cookie associated with a user's device, we trigger an
	// auto-log-in from that device, which lets us access the user's password. We			// auto-log-in from that device, which lets us access the user's password. We
	// need the password in order to double-write user data to the identity			// need the password in order to double-write user data to the identity
	// service. We only delete cookies associated with native devices because we			// service. We only delete cookies associated with native devices because we
	// don't cache passwords on other platforms.			// don't cache passwords on other platforms.
	await deleteCookies(cookieIDs);			await deleteCookies(cookieIDs);
	}			}

	export { compareMySQLUsersToIdentityService };			export { compareMySQLUsersToIdentityService };