private: removes collision check for tokens

this seems very unnecessary as the chance of this is 1 / 2^512

Signed-off-by: Philip Molares <philip.molares@udo.edu>

src/errors/errors.ts

@@ -15,7 +15,3 @@ export class ClientError extends Error {
 export class PermissionError extends Error {
   name = 'PermissionError';
 }
-
-export class RandomnessError extends Error {
-  name = 'RandomnessError';
-}

src/users/auth-token.entity.ts

@@ -22,7 +22,7 @@ export class AuthToken {
   @CreateDateColumn()
   createdAt: Date;
 
-  @Column()
+  @Column({ unique: true })
   accessToken: string;
 
   public static create(

src/users/users.service.ts

@@ -7,7 +7,7 @@
 import { Injectable } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
-import { NotInDBError, RandomnessError } from '../errors/errors';
+import { NotInDBError } from '../errors/errors';
 import { ConsoleLoggerService } from '../logger/console-logger.service';
 import { UserInfoDto } from './user-info.dto';
 import { User } from './user.entity';
@@ -38,26 +38,14 @@ export class UsersService {
     identifier: string,
   ): Promise<AuthToken> {
     const user = await this.getUserByUsername(userName);
-    let accessToken = '';
+    const randomString = crypt.randomBytes(64).toString('base64');
-    let randomString = '';
+    const accessToken = await this.hashPassword(randomString);
-    for (let i = 0; i < 100; i++) {
+    const token = AuthToken.create(user, identifier, accessToken);
-      try {
+    const createdToken = this.authTokenRepository.save(token);
-        randomString = crypt.randomBytes(64).toString("base64");
+    return {
-        accessToken = await this.hashPassword(randomString);
+      accessToken: randomString,
-        await this.getUserByAuthToken(accessToken);
+      ...createdToken,
-      } catch (NotInDBError) {
+    };
-        const token = AuthToken.create(user, identifier, accessToken);
-        const createdToken = this.authTokenRepository.save(token);
-        return {
-          accessToken: randomString,
-          ...createdToken
-        }
-      }
-    }
-    // This should never happen
-    throw new RandomnessError(
-      'Your machine is not able to generate not-in-use tokens. This should never happen.',
-    );
   }
 
   async deleteUser(userName: string) {