swadhinbiswas fix(auth): hash personal access tokens at rest · 2/15/2026
66091b8
36 lines · 1.0 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
---
import { getDatabase } from "@/db";
import { personalAccessTokens } from "@/db/schema";
import SettingsLayout from "@/layouts/SettingsLayout.astro";
import { desc, eq } from "drizzle-orm";

const user = Astro.locals.user;

if (!user) {
  return Astro.redirect("/login");
}

const db = getDatabase();
let tokens: any[] = [];
try {
  tokens = await db.query.personalAccessTokens.findMany({
    where: eq(personalAccessTokens.userId, user.id),
    orderBy: [desc(personalAccessTokens.createdAt)],
  });
} catch (e) {}
import TokensManager from "@/components/settings/TokensManager";

const serializableTokens = tokens.map((t) => ({
  id: t.id,
  name: t.name,
  tokenPrefix: t.token.startsWith("och_") ? `${t.token.slice(0, 12)}...` : "och_********",
  createdAt: t.createdAt.toISOString(),
  expiresAt: t.expiresAt ? t.expiresAt.toISOString() : null,
  lastUsedAt: t.lastUsedAt ? t.lastUsedAt.toISOString() : null,
}));
---

<SettingsLayout title="Personal Access Tokens">
  <TokensManager initialTokens={serializableTokens} client:load />
</SettingsLayout>