@cimo/authentication/dist/src/Service.js

Authentication middleware. Light, fast and secure.

"use strict";
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    var desc = Object.getOwnPropertyDescriptor(m, k);
    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
      desc = { enumerable: true, get: function() { return m[k]; } };
    }
    Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
    Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
    o["default"] = v;
});
var __importStar = (this && this.__importStar) || (function () {
    var ownKeys = function(o) {
        ownKeys = Object.getOwnPropertyNames || function (o) {
            var ar = [];
            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
            return ar;
        };
        return ownKeys(o);
    };
    return function (mod) {
        if (mod && mod.__esModule) return mod;
        var result = {};
        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
        __setModuleDefault(result, mod);
        return result;
    };
})();
Object.defineProperty(exports, "__esModule", { value: true });
exports.authenticationMiddleware = exports.removeCookie = exports.writeCookie = void 0;
const Crypto = __importStar(require("crypto"));
let cookieName = "";
const cookieTokenList = [];
const writeCookie = (cookieNameValue, response) => {
    cookieName = cookieNameValue;
    const tokenLength = 64;
    const token = Crypto.randomBytes(tokenLength).toString("hex");
    cookieTokenList.push(token);
    response.cookie(cookieName, token, { httpOnly: true, secure: true });
};
exports.writeCookie = writeCookie;
const removeCookie = (cookieName, request, response) => {
    const requestCookie = request.cookies[cookieName];
    if (requestCookie) {
        for (let a = cookieTokenList.length - 1; a >= 0; a--) {
            if (cookieTokenList[a] === requestCookie) {
                cookieTokenList.splice(a, 1);
            }
        }
        response.cookie(cookieName, "", { expires: new Date(0) });
    }
};
exports.removeCookie = removeCookie;
const authenticationMiddleware = (request, response, next) => {
    const requestAuthorization = request.headers["authorization"];
    const requestCookie = request.cookies[cookieName];
    if (!requestAuthorization && requestCookie) {
        let isExists = false;
        for (const cookieToken of cookieTokenList) {
            if (requestCookie === cookieToken) {
                isExists = true;
                break;
            }
        }
        if (!isExists) {
            response.status(401).send({ response: { stdout: "", stderr: "Unauthorized cookie." } });
            return;
        }
    }
    else if (requestAuthorization && requestAuthorization.startsWith("Bearer ") && requestCookie) {
        if (requestAuthorization.substring(7) !== requestCookie) {
            response.status(401).send({ response: { stdout: "", stderr: "Unauthorized bearer." } });
            return;
        }
    }
    else if (requestAuthorization && requestAuthorization.startsWith("Basic ") && !requestCookie) {
        const credentialSplit = Buffer.from(requestAuthorization.split(" ")[1], "base64").toString().split(":");
        if (credentialSplit[0].trim() === "" || credentialSplit[1].trim() === "") {
            response.status(401).send({ response: { stdout: "", stderr: "Unauthorized basic." } });
            return;
        }
    }
    else {
        response.status(401).send({ response: { stdout: "", stderr: "Require authorization." } });
        return;
    }
    next();
};
exports.authenticationMiddleware = authenticationMiddleware;
//# sourceMappingURL=Service.js.map