server/middlewares/oauth.ts

   1 import * as express from 'express'
   2 import * as OAuthServer from 'express-oauth-server'
   3 import 'express-validator'
   4 import { OAUTH_LIFETIME } from '../initializers'
   5 import { logger } from '../helpers/logger'
   6
   7 const oAuthServer = new OAuthServer({
   8   useErrorHandler: true,
   9   accessTokenLifetime: OAUTH_LIFETIME.ACCESS_TOKEN,
  10   refreshTokenLifetime: OAUTH_LIFETIME.REFRESH_TOKEN,
  11   model: require('../lib/oauth-model')
  12 })
  13
  14 function authenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
  15   oAuthServer.authenticate()(req, res, err => {
  16     if (err) {
  17       logger.warn('Cannot authenticate.', { err })
  18
  19       return res.status(err.status)
  20         .json({
  21           error: 'Token is invalid.',
  22           code: err.name
  23         })
  24         .end()
  25     }
  26
  27     return next()
  28   })
  29 }
  30
  31 function authenticatePromiseIfNeeded (req: express.Request, res: express.Response) {
  32   return new Promise(resolve => {
  33     // Already authenticated? (or tried to)
  34     if (res.locals.oauth && res.locals.oauth.token.User) return resolve()
  35
  36     if (res.locals.authenticated === false) return res.sendStatus(401)
  37
  38     authenticate(req, res, () => {
  39       return resolve()
  40     })
  41   })
  42 }
  43
  44 function optionalAuthenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
  45   if (req.header('authorization')) return authenticate(req, res, next)
  46
  47   res.locals.authenticated = false
  48
  49   return next()
  50 }
  51
  52 function token (req: express.Request, res: express.Response, next: express.NextFunction) {
  53   return oAuthServer.token()(req, res, err => {
  54     if (err) {
  55       return res.status(err.status)
  56         .json({
  57           error: err.message,
  58           code: err.name
  59         })
  60         .end()
  61     }
  62
  63     return next()
  64   })
  65 }
  66
  67 // ---------------------------------------------------------------------------
  68
  69 export {
  70   authenticate,
  71   authenticatePromiseIfNeeded,
  72   optionalAuthenticate,
  73   token
  74 }