35 lines
1.4 KiB
TypeScript
35 lines
1.4 KiB
TypeScript
import { NextFunction, Request, Response } from "express";
|
|
import { User } from "../Schemas/User";
|
|
import { JwtPayload, verify } from "jsonwebtoken";
|
|
import { IS_DEBUG, JWT_KEY } from "./Constants";
|
|
|
|
declare global {
|
|
// eslint-disable-next-line @typescript-eslint/no-namespace
|
|
namespace Express {
|
|
interface Request {
|
|
user?: User;
|
|
}
|
|
}
|
|
}
|
|
|
|
export function RequireAuthentication(Relations?: object) {
|
|
return async (req: Request, res: Response, next: NextFunction) =>{
|
|
if (!req.header("X-Partypack-Token") && !req.cookies["Token"] && !req.header("Authorization"))
|
|
return res.status(401).json({ errorMessage: "This endpoint requires authorization." });
|
|
|
|
let JWT: JwtPayload;
|
|
try {
|
|
JWT = verify(req.header("X-Partypack-Token") ?? req.cookies["Token"] ?? req.header("Authorization"), JWT_KEY!) as JwtPayload;
|
|
} catch (err) {
|
|
console.error(err);
|
|
return res.status(403).json({ errorMessage: `Invalid Partypack token provided.${IS_DEBUG ? ` (${err})` : ""}` });
|
|
}
|
|
|
|
const UserData = await User.findOne({ where: { ID: JWT.ID }, relations: Relations });
|
|
if (!UserData)
|
|
return res.status(401).json({ errorMessage: "Invalid Partypack token provided. User does not exist in database. Please contact an instance admin." });
|
|
|
|
req.user = UserData;
|
|
next();
|
|
}
|
|
} |