• Index
• Search by APIs
• Search by Words
• Project Search

• Java
• Python
• JavaScript
• TypeScript
• C++
• Scala
• Blog

• vsinder-api-master
  • src
    • resetNumSwipesDaily.ts
    • index.ts
    • rateLimitMiddleware.ts
    • migrations
      • 1606878861371-AppleUsers.ts
      • 1605313319843-Messages.ts
      • 1607099942164-MessageMatchId.ts
      • 1605572316463-Unmatch.ts
      • 1607098818992-MatchId.ts
      • 1605808271193-Flair.ts
      • 1605114801130-Rest.ts
      • 1605410540874-MatchCreatedAt.ts
      • 1606056032231-Global.ts
      • 1605799639880-ShadowBan.ts
      • 1606611089464-Read12.ts
      • 1605741679818-NumLikes.ts
      • 1605754615028-Report.ts
      • 1605543259842-Read.ts
      • 1607570310661-NumSwipes.ts
      • 1606576498352-PushToken.ts
    • utils.ts
    • env.d.ts
    • queries
      • getUser.ts
    • auth
      • createTokens.ts
      • isAuth.ts
    • entities
      • Match.ts
      • Message.ts
      • User.ts
      • Feed.ts
      • Report.ts
      • View.ts
    • pushNotifications.ts
    • validation.ts
    • constants.ts
  • .env.example
  • LICENSE
  • README.md
  • package.json
  • scripts
    • setup_do.sh
    • post_first_deploy.sh
    • deploy.sh
  • ormconfig.json
  • Dockerfile
  • tsconfig.json
  • .gitignore
  • .dockerignore

import { RequestHandler } from "express";
import { verify } from "jsonwebtoken";
import createError from "http-errors";
import { User } from "../entities/User";
import { createTokens } from "./createTokens";

export const isAuth: (st?: boolean) => RequestHandler<{}, any, any, {}> = (
  shouldThrow = true
) => async (req, res, next) => {
  const accessToken = req.headers["access-token"];
  if (!accessToken || typeof accessToken !== "string") {
    return next(
      !shouldThrow ? undefined : createError(401, "not authenticated")
    );
  }

  try {
    const data = verify(accessToken, process.env.ACCESS_TOKEN_SECRET) as any;
    (req as any).userId = data.userId;
    return next();
  } catch {}

  const refreshToken = req.headers["refresh-token"];
  if (!refreshToken || typeof refreshToken !== "string") {
    return next(
      !shouldThrow ? undefined : createError(401, "not authenticated")
    );
  }

  let data;
  try {
    data = verify(refreshToken, process.env.REFRESH_TOKEN_SECRET) as any;
  } catch {
    return next(
      !shouldThrow ? undefined : createError(401, "not authenticated")
    );
  }

  const user = await User.findOne(data.userId);
  // token has been invalidated or user deleted
  if (!user || user.tokenVersion !== data.tokenVersion) {
    return next(
      !shouldThrow ? undefined : createError(401, "not authenticated")
    );
  }

  const tokens = createTokens(user);

  res.setHeader("refresh-token", tokens.refreshToken);
  res.setHeader("access-token", tokens.accessToken);
  (req as any).userId = data.userId;

  next();
};