kyle hoell
59 lines
1.4 KiB
TypeScript
59 lines
1.4 KiB
TypeScript
import jwt from "jsonwebtoken";
|
|
import env from "../enviroment/env";
|
|
import {Request, Response, NextFunction} from "express";
|
|
|
|
interface RequestType extends Request {
|
|
user?: userAccessType,
|
|
token?: string,
|
|
encryptedToken?: string,
|
|
}
|
|
|
|
type jwtType = {
|
|
iv: Buffer,
|
|
user: userAccessType
|
|
}
|
|
|
|
type userAccessType = {
|
|
_id: string,
|
|
emailVerified: boolean,
|
|
email: string,
|
|
admin: boolean,
|
|
botChecked: boolean,
|
|
username: string,
|
|
}
|
|
|
|
const auth = async(req: RequestType, res: Response, next: NextFunction) => {
|
|
|
|
try {
|
|
|
|
console.log("auth up address", req.clientIp, req.ip);
|
|
|
|
// console.log(req.headers);
|
|
|
|
const accessToken = req.cookies["access-token"];
|
|
|
|
if (!accessToken) throw new Error("No Access Token");
|
|
|
|
const decoded = jwt.verify(accessToken, env.passwordAccess!) as jwtType;
|
|
|
|
const user = decoded.user;
|
|
|
|
if (!user) throw new Error("No User");
|
|
if (!user.emailVerified && !env.disableEmailVerification) throw new Error("Email Not Verified")
|
|
|
|
req.user = user;
|
|
|
|
next();
|
|
|
|
} catch (e) {
|
|
|
|
if (e.message !== "No Access Token" &&
|
|
e.message !== "No User" &&
|
|
e.message !== "Email Not Verified") console.log("\nAuthorization Middleware Error:", e.message);
|
|
|
|
res.status(401).send("Error Authenticating");
|
|
}
|
|
}
|
|
|
|
export default auth;
|