umami/lib/session.js

import { getWebsite, getSession, createSession } from 'lib/db';
import { getCountry, getDevice, getIpAddress, isValidSession } from 'lib/utils';
import { hash } from 'lib/crypto';

export default async req => {
  const { payload } = req.body;
  const { session } = payload;

  if (isValidSession(session)) {
    return session;
  }

  const ip = getIpAddress(req);
  const { userAgent, browser, os } = getDevice(req);
  const country = await getCountry(req, ip);
  const { website: website_uuid, hostname, screen, language } = payload;

  if (website_uuid) {
    const website = await getWebsite(website_uuid);

    if (website) {
      const { website_id } = website;
      const session_uuid = hash(website_id, hostname, ip, userAgent, os);

      let session = await getSession(session_uuid);

      if (!session) {
        session = await createSession(website_id, {
          session_uuid,
          hostname,
          browser,
          os,
          screen,
          language,
          country,
        });
      }

      const { session_id } = session;

      return [
        website_id,
        website_uuid,
        session_id,
        session_uuid,
        hash(website_id, website_uuid, session_id, session_uuid),
      ].join(':');
    }
  }
};