Move DB queries related to session tokens in a separate module

src/invidious/database/nonces.cr

@@ -0,0 +1,46 @@
+require "./base.cr"
+
+module Invidious::Database::Nonces
+  extend self
+
+  # -------------------
+  #  Insert
+  # -------------------
+
+  def insert(nonce : String, expire : Time)
+    request = <<-SQL
+      INSERT INTO nonces
+      VALUES ($1, $2)
+      ON CONFLICT DO NOTHING
+    SQL
+
+    PG_DB.exec(request, nonce, expire)
+  end
+
+  # -------------------
+  #  Update
+  # -------------------
+
+  def update_set_expired(nonce : String)
+    request = <<-SQL
+      UPDATE nonces
+      SET expire = $1
+      WHERE nonce = $2
+    SQL
+
+    PG_DB.exec(request, Time.utc(1990, 1, 1), nonce)
+  end
+
+  # -------------------
+  #  Select
+  # -------------------
+
+  def select(nonce : String) : Tuple(String, Time)?
+    request = <<-SQL
+      SELECT * FROM nonces
+      WHERE nonce = $1
+    SQL
+
+    return PG_DB.query_one?(request, nonce, as: {String, Time})
+  end
+end

src/invidious/database/sessions.cr

@@ -0,0 +1,74 @@
+require "./base.cr"
+
+module Invidious::Database::SessionIDs
+  extend self
+
+  # -------------------
+  #  Insert
+  # -------------------
+
+  def insert(sid : String, email : String, handle_conflicts : Bool = false)
+    request = <<-SQL
+      INSERT INTO session_ids
+      VALUES ($1, $2, $3)
+    SQL
+
+    request += " ON CONFLICT (id) DO NOTHING" if handle_conflicts
+
+    PG_DB.exec(request, sid, email, Time.utc)
+  end
+
+  # -------------------
+  #  Delete
+  # -------------------
+
+  def delete(*, sid : String)
+    request = <<-SQL
+      DELETE FROM session_ids *
+      WHERE id = $1
+    SQL
+
+    PG_DB.exec(request, sid)
+  end
+
+  def delete(*, email : String)
+    request = <<-SQL
+      DELETE FROM session_ids *
+      WHERE email = $1
+    SQL
+
+    PG_DB.exec(request, email)
+  end
+
+  def delete(*, sid : String, email : String)
+    request = <<-SQL
+      DELETE FROM session_ids *
+      WHERE id = $1 AND email = $2
+    SQL
+
+    PG_DB.exec(request, sid, email)
+  end
+
+  # -------------------
+  #  Select
+  # -------------------
+
+  def select_email(sid : String) : String?
+    request = <<-SQL
+      SELECT email FROM session_ids
+      WHERE id = $1
+    SQL
+
+    PG_DB.query_one?(request, sid, as: String)
+  end
+
+  def select_all(email : String) : Array({session: String, issued: Time})
+    request = <<-SQL
+      SELECT id, issued FROM session_ids
+      WHERE email = $1
+      ORDER BY issued DESC
+    SQL
+
+    PG_DB.query_all(request, email, as: {session: String, issued: Time})
+  end
+end