Initial commit

api/src/middlewares/authorization-middleware.ts

@@ -0,0 +1,53 @@
+import { type NextFunction, type Response } from "express"
+import { type Request as JwtRequest } from "express-jwt"
+import { isNil } from "lodash"
+
+import { logger } from "@/utils/logger"
+import { Auth0PayloadError } from "@/integrations/auth0-integration"
+import { User } from "@/models"
+import { Users } from "@/services"
+
+export type AuthorizationRequest = JwtRequest & {
+  currentUser?: User | null
+}
+
+/**
+ * Requires api/src/middlewares/jwt-middleware.ts to be run first
+ *
+ * I'd love to merge that code in here at some point, or make all this code a controller "before action"
+ * I'm uncomfortable with creating users automatically here, I'd rather the front-end requested
+ * user creation directly, and might switch to that in the future.
+ *
+ * NOTE: must be kept in sync with api/tests/support/mock-current-user.ts
+ */
+export async function authorizationMiddleware(
+  req: AuthorizationRequest,
+  res: Response,
+  next: NextFunction
+) {
+  const user = await User.withScope(["asCurrentUser"]).findOne({
+    where: {
+      auth0Subject: req.auth?.sub || "",
+    },
+  })
+
+  if (!isNil(user)) {
+    req.currentUser = user
+    return next()
+  }
+
+  try {
+    const token = req.headers.authorization || ""
+    const user = await Users.EnsureFromAuth0TokenService.perform(token)
+    req.currentUser = user
+    return next()
+  } catch (error) {
+    logger.error(`Error ensuring user from Auth0 token ${error}`, { error })
+
+    if (error instanceof Auth0PayloadError) {
+      return res.status(502).json({ message: "External authorization api failed." })
+    } else {
+      return res.status(401).json({ message: "User authentication failed." })
+    }
+  }
+}