summary refs log tree commit diff
path: root/src/middlewares/Authentication.ts
diff options
context:
space:
mode:
authorFlam3rboy <34555296+Flam3rboy@users.noreply.github.com>2021-08-12 20:09:35 +0200
committerFlam3rboy <34555296+Flam3rboy@users.noreply.github.com>2021-08-12 20:09:35 +0200
commit524b5df7231635682053d0c028b0a24189b875ab (patch)
tree38bdb481e6149a825170cb67cb961410de92efdd /src/middlewares/Authentication.ts
parentnpm i @fosscord/server-util@1.3.52 (diff)
downloadserver-524b5df7231635682053d0c028b0a24189b875ab.tar.xz
:sparkles: api
Diffstat (limited to 'src/middlewares/Authentication.ts')
-rw-r--r--src/middlewares/Authentication.ts48
1 files changed, 0 insertions, 48 deletions
diff --git a/src/middlewares/Authentication.ts b/src/middlewares/Authentication.ts
deleted file mode 100644

index 01b7ef57..00000000 --- a/src/middlewares/Authentication.ts +++ /dev/null
@@ -1,48 +0,0 @@ -import { NextFunction, Request, Response } from "express"; -import { HTTPError } from "lambert-server"; -import { checkToken, Config } from "@fosscord/server-util"; - -export const NO_AUTHORIZATION_ROUTES = [ - /^\/api(\/v\d+)?\/auth\/login/, - /^\/api(\/v\d+)?\/auth\/register/, - /^\/api(\/v\d+)?\/webhooks\//, - /^\/api(\/v\d+)?\/ping/, - /^\/api(\/v\d+)?\/gateway/, - /^\/api(\/v\d+)?\/experiments/, - /^\/api(\/v\d+)?\/guilds\/\d+\/widget\.(json|png)/ -]; - -export const API_PREFIX = /^\/api(\/v\d+)?/; -export const API_PREFIX_TRAILING_SLASH = /^\/api(\/v\d+)?\//; - -declare global { - namespace Express { - interface Request { - user_id: any; - user_bot: boolean; - token: any; - } - } -} - -export async function Authentication(req: Request, res: Response, next: NextFunction) { - if (req.method === "OPTIONS") return res.sendStatus(204); - if (!req.url.startsWith("/api")) return next(); - const apiPath = req.url.replace(API_PREFIX, ""); - if (apiPath.startsWith("/invites") && req.method === "GET") return next(); - if (NO_AUTHORIZATION_ROUTES.some((x) => x.test(req.url))) return next(); - if (!req.headers.authorization) return next(new HTTPError("Missing Authorization Header", 401)); - - try { - const { jwtSecret } = Config.get().security; - - const { decoded, user }: any = await checkToken(req.headers.authorization, jwtSecret); - - req.token = decoded; - req.user_id = decoded.id; - req.user_bot = user.bot; - return next(); - } catch (error) { - return next(new HTTPError(error.toString(), 400)); - } -}