Remove redis

client/package.json

@@ -1,7 +1,7 @@
 {
   "private": true,
   "scripts": {
-    "start": "NODE_ENV=development webpack serve",
+    "start": "NODE_ENV=development NODE_OPTIONS=--openssl-legacy-provider webpack serve",
     "build": "NODE_ENV=production webpack",
     "build:dev": "NODE_ENV=development webpack",
     "lint": "eslint './src/**/*.{js,jsx,json}'",

package.json

@@ -39,7 +39,6 @@
     "dotenv": "^10.0.0",
     "express": "^4.17.1",
     "helmet": "^4.6.0",
-    "ioredis": "^4.27.10",
     "joi": "^17.4.2",
     "jsonwebtoken": "^8.5.1",
     "mongoose": "^6.0.8",

server/controllers/user.controller.js

@@ -75,9 +75,8 @@ const login = async (req, res, next) => {
   }
 }
 
-const logout = async (req, res, next) => {
+const logout = async (_req, res, next) => {
   try {
-    await userService.removeRefreshToken(req.userId)
     res.json({ message: 'user logged out' })
   } catch (err) {
     next(err)

server/middlewares/auth.js

@@ -2,7 +2,6 @@ import jwt from 'jsonwebtoken'
 
 import config from '../utils/config.js'
 import HttpError from '../utils/http-error.js'
-import redisClient from '../utils/connect-redis.js'
 
 const verifyToken = async (req, _res, next) => {
   const authorization = req.get('authorization')
@@ -29,13 +28,6 @@ const verifyRefreshToken = async (req, _res, next) => {
 
     const { id } = jwt.verify(refreshToken, config.REFRESH_TOKEN_SECRET)
     req.userId = id
-
-    const tokenInRedis = await redisClient.get(id)
-
-    if (!(tokenInRedis && tokenInRedis === refreshToken)) {
-      throw new HttpError(403, 'invalid token')
-    }
-
     next()
   } catch (err) {
     next(err)

server/services/user.service.js

@@ -3,7 +3,6 @@ import jwt from 'jsonwebtoken'
 
 import User from '../models/user.model.js'
 import config from '../utils/config.js'
-import redisClient from '../utils/connect-redis.js'
 
 const getAllUsers = async () => await User.find()
 
@@ -30,14 +29,9 @@ const signToken = id => {
 const signRefreshToken = async id => {
   const options = { expiresIn: config.REFRESH_TOKEN_LIFE }
   const refreshToken = jwt.sign({ id }, config.REFRESH_TOKEN_SECRET, options)
-  await redisClient.set(id, refreshToken, 'PX', config.REFRESH_TOKEN_LIFE)
   return refreshToken
 }
 
-const removeRefreshToken = async id => {
-  await redisClient.del(id)
-}
-
 const deleteUser = async id => await User.findByIdAndDelete(id)
 
 export default {
@@ -49,6 +43,5 @@ export default {
   validatePassowrd,
   signToken,
   signRefreshToken,
-  removeRefreshToken,
   deleteUser
 }

server/utils/config.js

@@ -8,7 +8,6 @@ const {
   TOKEN_LIFE,
   REFRESH_TOKEN_SECRET,
   REFRESH_TOKEN_LIFE,
-  REDIS_URI,
   TMDB_API_KEY
 } = process.env
 
@@ -24,6 +23,5 @@ export default {
   TOKEN_LIFE,
   REFRESH_TOKEN_SECRET,
   REFRESH_TOKEN_LIFE,
-  REDIS_URI,
   TMDB_API_KEY
 }