generated from alphane/template
54 lines
1.6 KiB
TypeScript
54 lines
1.6 KiB
TypeScript
import { type NextFunction, type Response } from "express"
|
|
import { type Request as JwtRequest } from "express-jwt"
|
|
import { isNil } from "lodash"
|
|
|
|
import { logger } from "@/utils/logger"
|
|
import { Auth0PayloadError } from "@/integrations/auth0-integration"
|
|
import { User } from "@/models"
|
|
import { Users } from "@/services"
|
|
|
|
export type AuthorizationRequest = JwtRequest & {
|
|
currentUser?: User | null
|
|
}
|
|
|
|
/**
|
|
* Requires api/src/middlewares/jwt-middleware.ts to be run first
|
|
*
|
|
* I'd love to merge that code in here at some point, or make all this code a controller "before action"
|
|
* I'm uncomfortable with creating users automatically here, I'd rather the front-end requested
|
|
* user creation directly, and might switch to that in the future.
|
|
*
|
|
* NOTE: must be kept in sync with api/tests/support/mock-current-user.ts
|
|
*/
|
|
export async function authorizationMiddleware(
|
|
req: AuthorizationRequest,
|
|
res: Response,
|
|
next: NextFunction
|
|
) {
|
|
const user = await User.withScope(["asCurrentUser"]).findOne({
|
|
where: {
|
|
auth0Subject: req.auth?.sub || "",
|
|
},
|
|
})
|
|
|
|
if (!isNil(user)) {
|
|
req.currentUser = user
|
|
return next()
|
|
}
|
|
|
|
try {
|
|
const token = req.headers.authorization || ""
|
|
const user = await Users.EnsureFromAuth0TokenService.perform(token)
|
|
req.currentUser = user
|
|
return next()
|
|
} catch (error) {
|
|
logger.error(`Error ensuring user from Auth0 token ${error}`, { error })
|
|
|
|
if (error instanceof Auth0PayloadError) {
|
|
return res.status(502).json({ message: "External authorization api failed." })
|
|
} else {
|
|
return res.status(401).json({ message: "User authentication failed." })
|
|
}
|
|
}
|
|
}
|