101 lines
2.8 KiB
TypeScript
101 lines
2.8 KiB
TypeScript
import basicAuth from 'basic-auth';
|
|
import bcrypt from 'bcryptjs';
|
|
import UserModel from '../models/user';
|
|
|
|
|
|
// appends req.auth(res, ['levels'], method = 'all')
|
|
// which returns sends error message and returns false if unauthorized, otherwise true
|
|
// req.authDetails returns eg. {methods: ['basic'], username: 'johndoe', level: 'write'}
|
|
|
|
module.exports = async (req, res, next) => {
|
|
let givenMethod = ''; // authorization method given by client, basic taken preferred
|
|
let user = {name: '', level: '', id: ''}; // user object
|
|
|
|
// test authentications
|
|
const userBasic = await basic(req, next);
|
|
|
|
if (userBasic) { // basic available
|
|
givenMethod = 'basic';
|
|
user = userBasic;
|
|
}
|
|
else { // if basic not available, test key
|
|
const userKey = await key(req, next);
|
|
if (userKey) {
|
|
givenMethod = 'key';
|
|
user = userKey;
|
|
}
|
|
}
|
|
|
|
req.auth = (res, levels, method = 'all') => {
|
|
if (givenMethod === method || (method === 'all' && givenMethod !== '')) { // method is available
|
|
if (levels.indexOf(user.level) > -1) { // level is available
|
|
return true;
|
|
}
|
|
else {
|
|
res.status(403).json({status: 'Forbidden'});
|
|
return false;
|
|
}
|
|
}
|
|
else {
|
|
res.status(401).json({status: 'Unauthorized'});
|
|
return false;
|
|
}
|
|
}
|
|
|
|
req.authDetails = {
|
|
method: givenMethod,
|
|
username: user.name,
|
|
level: user.level,
|
|
id: user.id
|
|
};
|
|
|
|
next();
|
|
}
|
|
|
|
|
|
function basic (req, next): any { // checks basic auth and returns changed user object
|
|
return new Promise(resolve => {
|
|
const auth = basicAuth(req);
|
|
if (auth !== undefined) { // basic auth available
|
|
UserModel.find({name: auth.name}).lean().exec( (err, data: any) => { // find user
|
|
if (err) return next(err);
|
|
if (data.length === 1) { // one user found
|
|
bcrypt.compare(auth.pass, data[0].pass, (err, res) => { // check password
|
|
if (err) return next(err);
|
|
if (res === true) {
|
|
resolve({level: data[0].level, name: data[0].name, id: data[0]._id.toString()});
|
|
}
|
|
else {
|
|
resolve(null);
|
|
}
|
|
});
|
|
}
|
|
else {
|
|
resolve(null);
|
|
}
|
|
});
|
|
}
|
|
else {
|
|
resolve(null);
|
|
}
|
|
});
|
|
}
|
|
|
|
function key (req, next): any { // checks API key and returns changed user object
|
|
return new Promise(resolve => {
|
|
if (req.query.key !== undefined) {
|
|
UserModel.find({key: req.query.key}).lean().exec( (err, data: any) => { // find user
|
|
if (err) return next(err);
|
|
if (data.length === 1) { // one user found
|
|
resolve({level: data[0].level, name: data[0].name, id: data[0]._id.toString()});
|
|
}
|
|
else {
|
|
resolve(null);
|
|
}
|
|
});
|
|
}
|
|
else {
|
|
resolve(null);
|
|
}
|
|
});
|
|
} |