104f84f252
As discussed with the product team we want to enforce kebab-case file names for all files, with the exception of files which export a single class, in which case they should be PascalCase and reflect the class which they export. This will help find classes faster, and should push better naming for them too. Some files and packages have been excluded from this linting, specifically when a library or framework depends on the naming of a file for the functionality e.g. Ember, knex-migrator, adapter-manager
70 lines
1.8 KiB
JavaScript
70 lines
1.8 KiB
JavaScript
module.exports = SessionFromToken;
|
|
|
|
/**
|
|
* @typedef {object} User
|
|
* @prop {string} id
|
|
*/
|
|
|
|
/**
|
|
* @typedef {import('express').Request} Req
|
|
* @typedef {import('express').Response} Res
|
|
* @typedef {import('express').NextFunction} Next
|
|
* @typedef {import('express').RequestHandler} RequestHandler
|
|
*/
|
|
|
|
/**
|
|
* Returns a connect middleware function which exchanges a token for a session
|
|
*
|
|
* @template Token
|
|
* @template Lookup
|
|
*
|
|
* @param { object } deps
|
|
* @param { (req: Req) => Promise<Token> } deps.getTokenFromRequest
|
|
* @param { (token: Token) => Promise<Lookup> } deps.getLookupFromToken
|
|
* @param { (lookup: Lookup) => Promise<User> } deps.findUserByLookup
|
|
* @param { (req: Req, res: Res, user: User) => Promise<void> } deps.createSession
|
|
* @param { boolean } deps.callNextWithError - Whether next should be call with an error or just pass through
|
|
*
|
|
* @returns {RequestHandler}
|
|
*/
|
|
function SessionFromToken({
|
|
getTokenFromRequest,
|
|
getLookupFromToken,
|
|
findUserByLookup,
|
|
createSession,
|
|
callNextWithError
|
|
}) {
|
|
/**
|
|
* @param {Req} req
|
|
* @param {Res} res
|
|
* @param {Next} next
|
|
* @returns {Promise<void>}
|
|
*/
|
|
async function handler(req, res, next) {
|
|
try {
|
|
const token = await getTokenFromRequest(req);
|
|
if (!token) {
|
|
return next();
|
|
}
|
|
const email = await getLookupFromToken(token);
|
|
if (!email) {
|
|
return next();
|
|
}
|
|
const user = await findUserByLookup(email);
|
|
if (!user) {
|
|
return next();
|
|
}
|
|
await createSession(req, res, user);
|
|
next();
|
|
} catch (err) {
|
|
if (callNextWithError) {
|
|
next(err);
|
|
} else {
|
|
next();
|
|
}
|
|
}
|
|
}
|
|
|
|
return handler;
|
|
}
|