overleaf/services/web/scripts/backfill_project_invites_token_hmac.js

const { db, waitForDb } = require('../app/src/infrastructure/mongodb')
const { batchedUpdate } = require('./helpers/batchedUpdate')
const minimist = require('minimist')
const CollaboratorsInviteHelper = require('../app/src/Features/Collaborators/CollaboratorsInviteHelper')

const argv = minimist(process.argv.slice(2), {
  boolean: ['dry-run', 'help'],
  default: {
    'dry-run': true,
  },
})

const DRY_RUN = argv['dry-run']

async function addTokenHmacField(DRY_RUN) {
  const query = { tokenHmac: { $exists: false } }

  await batchedUpdate(
    'projectInvites',
    query,
    async invites => {
      for (const invite of invites) {
        console.log(
          `=> Missing "tokenHmac" token in invitation: ${invite._id.toString()}`
        )

        if (DRY_RUN) {
          console.log(
            `=> DRY RUN - would add "tokenHmac" token to invitation ${invite._id.toString()}`
          )
          continue
        }

        const tokenHmac = CollaboratorsInviteHelper.hashInviteToken(
          invite.token
        )

        await db.projectInvites.updateOne(
          { _id: invite._id },
          { $set: { tokenHmac } }
        )

        console.log(
          `=> Added "tokenHmac" token to invitation ${invite._id.toString()}`
        )
      }
    },
    { token: 1 }
  )
}

async function main(DRY_RUN) {
  await waitForDb()
  await addTokenHmacField(DRY_RUN)
}

module.exports = main

if (require.main === module) {
  if (argv.help || argv._.length > 1) {
    console.error(`Usage: node scripts/backfill_project_invites_token_hmac.js
      Adds a "tokenHmac" field (which is a hashed version of the token) to each project invite record.

      Options:
          --dry-run         finds invitations without HMAC token but does not do any updates
    `)

    process.exit(1)
  }

  main(DRY_RUN)
    .then(() => {
      console.error('Done')
      process.exit(0)
    })
    .catch(err => {
      console.error(err)
      process.exit(1)
    })
}