server/middlewares/oauth.ts

   1 import * as express from 'express'
   2 import * as OAuthServer from 'express-oauth-server'
   3 import 'express-validator'
   4 import { OAUTH_LIFETIME } from '../initializers'
   5 import { logger } from '../helpers/logger'
   6
   7 const oAuthServer = new OAuthServer({
   8   useErrorHandler: true,
   9   accessTokenLifetime: OAUTH_LIFETIME.ACCESS_TOKEN,
  10   refreshTokenLifetime: OAUTH_LIFETIME.REFRESH_TOKEN,
  11   model: require('../lib/oauth-model')
  12 })
  13
  14 function authenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
  15   oAuthServer.authenticate()(req, res, err => {
  16     if (err) {
  17       logger.warn('Cannot authenticate.', { err })
  18
  19       return res.status(err.status)
  20         .json({
  21           error: 'Token is invalid.',
  22           code: err.name
  23         })
  24         .end()
  25     }
  26
  27     return next()
  28   })
  29 }
  30
  31 function optionalAuthenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
  32   if (req.header('authorization')) return authenticate(req, res, next)
  33
  34   return next()
  35 }
  36
  37 function token (req: express.Request, res: express.Response, next: express.NextFunction) {
  38   return oAuthServer.token()(req, res, err => {
  39     if (err) {
  40       return res.status(err.status)
  41         .json({
  42           error: 'Authentication failed.',
  43           code: err.name
  44         })
  45         .end()
  46     }
  47
  48     return next()
  49   })
  50 }
  51
  52 // ---------------------------------------------------------------------------
  53
  54 export {
  55   authenticate,
  56   optionalAuthenticate,
  57   token
  58 }