myDrive/backend/middleware/auth.ts

import jwt from "jsonwebtoken";
import env from "../enviroment/env";
import { Request, Response, NextFunction } from "express";

interface RequestType extends Request {
  user?: userAccessType;
  token?: string;
  encryptedToken?: string;
}

type jwtType = {
  iv: Buffer;
  user: userAccessType;
};

type userAccessType = {
  _id: string;
  emailVerified: boolean;
  email: string;
  admin: boolean;
  botChecked: boolean;
  username: string;
};

const auth = async (req: RequestType, res: Response, next: NextFunction) => {
  try {
    const accessToken = req.cookies["access-token"];

    if (!accessToken) throw new Error("No Access Token");

    const decoded = jwt.verify(accessToken, env.passwordAccess!) as jwtType;

    const user = decoded.user;

    if (!user) throw new Error("No User");
    if (!user.emailVerified && !env.disableEmailVerification)
      throw new Error("Email Not Verified");

    req.user = user;

    next();
  } catch (e: unknown) {
    if (
      e instanceof Error &&
      e.message !== "No Access Token" &&
      e.message !== "No User" &&
      e.message !== "Email Not Verified"
    ) {
      console.log("\nAuthorization Middleware Error:", e.message);
    }

    res.status(401).send("Error Authenticating");
  }
};

export default auth;