bf63ffe424
closes https://github.com/TryGhost/Members/issues/148 - geolocation was not being fetched/stored for paid member signup - magic link was being sent after Stripe webhook but we don't have an IP at that stage - it only worked when a magic link was requested by the browser - moved the geolocation fetch/update to `members-ssr` - kept the ip geolookup and storage inside `members-api` but exposed it as a method so consumers are able to choose when it's performed - used the new api method in `members-ssr` when exchanging a token from the session as that is always driven by browser requests so we know we have an IP and it's likely the correct one (reliant on consumers having "trust proxy" config correct) - stopped storing IP addresses in the token payload (keeps links shorter) |
||
---|---|---|
.. | ||
test | ||
.eslintrc.js | ||
example.js | ||
index.js | ||
LICENSE | ||
package.json | ||
README.md | ||
tsconfig.json |
Members Ssr
Install
npm install members-ssr --save
or
yarn add members-ssr
Usage
const MembersSSR = require('./');
const {
exchangeTokenForSession,
getMemberDataFromSession,
deleteSession
} = MembersSSR({
cookieMaxAge: 1000 * 60 * 60 * 24 * 184, // 184 days max cookie age (default)
cookieSecure: true, // Secure cookie (default)
cookieName: 'members-ssr', // Name of cookie (default)
cookiePath: '/', // Path of cookie (default)
cookieKeys: 'some-coole-secret', // Key to sign cookie with
getMembersApi: () => membersApiInstance // Used to fetch data and verify tokens
});
const handleError = res => err => {
res.writeHead(err.statusCode);
res.end(err.message);
};
require('http').createServer((req, res) => {
if (req.method.toLowerCase() === 'post') {
exchangeTokenForSession(req, res).then((member) => {
res.writeHead(200);
res.end(JSON.stringify(member));
}).catch(handleError(res));
} else if (req.method.toLowerCase() === 'delete') {
deleteSession(req, res).then(() => {
res.writeHead(204);
res.end();
}).catch(handleError(res));
} else {
getMemberDataFromSession(req, res).then((member) => {
res.writeHead(200, {
'Content-Type': 'application/json'
});
res.end(JSON.stringify(member));
}).catch(handleError(res));
}
}).listen(3665);
Develop
This is a mono repository, managed with lerna.
Follow the instructions for the top-level repo.
git clone
this repo &cd
into it as usual- Run
yarn
to install top-level dependencies.
Run
yarn dev
Test
yarn lint
run just eslintyarn test
run lint and tests
Copyright & License
Copyright (c) 2013-2020 Ghost Foundation - Released under the MIT license.