-import OAuthServer = require('express-oauth-server')
-
-const constants = require('../initializers/constants')
-const logger = require('../helpers/logger')
+import * as express from 'express'
+import * as OAuthServer from 'express-oauth-server'
+import 'express-validator'
+import { OAUTH_LIFETIME } from '../initializers'
+import { logger } from '../helpers/logger'
const oAuthServer = new OAuthServer({
- accessTokenLifetime: constants.OAUTH_LIFETIME.ACCESS_TOKEN,
- refreshTokenLifetime: constants.OAUTH_LIFETIME.REFRESH_TOKEN,
+ useErrorHandler: true,
+ accessTokenLifetime: OAUTH_LIFETIME.ACCESS_TOKEN,
+ refreshTokenLifetime: OAUTH_LIFETIME.REFRESH_TOKEN,
model: require('../lib/oauth-model')
})
-function authenticate (req, res, next) {
- oAuthServer.authenticate()(req, res, function (err) {
+function authenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
+ oAuthServer.authenticate()(req, res, err => {
if (err) {
- logger.error('Cannot authenticate.', { error: err })
- return res.sendStatus(500)
+ logger.warn('Cannot authenticate.', { err })
+
+ return res.status(err.status)
+ .json({
+ error: 'Token is invalid.',
+ code: err.name
+ })
+ .end()
}
- if (res.statusCode === 401 || res.statusCode === 400 || res.statusCode === 503) return res.end()
-
return next()
})
}
-function token (req, res, next) {
- return oAuthServer.token()(req, res, next)
+function optionalAuthenticate (req: express.Request, res: express.Response, next: express.NextFunction) {
+ if (req.header('authorization')) return authenticate(req, res, next)
+
+ return next()
+}
+
+function token (req: express.Request, res: express.Response, next: express.NextFunction) {
+ return oAuthServer.token()(req, res, err => {
+ if (err) {
+ return res.status(err.status)
+ .json({
+ error: 'Authentication failed.',
+ code: err.name
+ })
+ .end()
+ }
+
+ return next()
+ })
}
// ---------------------------------------------------------------------------
export {
authenticate,
+ optionalAuthenticate,
token
}