@cimo/authentication
Version:
Authentication middleware. Light, fast and secure.
57 lines • 2.33 kB
JavaScript
import * as Crypto from "crypto";
let cookieName = "";
const cookieTokenList = [];
export const writeCookie = (cookieNameValue, response) => {
cookieName = cookieNameValue;
const tokenLength = 64;
const token = Crypto.randomBytes(tokenLength).toString("hex");
cookieTokenList.push(token);
response.cookie(cookieName, token, { httpOnly: true, secure: true });
};
export const removeCookie = (cookieName, request, response) => {
const requestCookie = request.cookies[cookieName];
if (requestCookie) {
for (let a = cookieTokenList.length - 1; a >= 0; a--) {
if (cookieTokenList[a] === requestCookie) {
cookieTokenList.splice(a, 1);
}
}
response.cookie(cookieName, "", { expires: new Date(0) });
}
};
export const authenticationMiddleware = (request, response, next) => {
const requestAuthorization = request.headers["authorization"];
const requestCookie = request.cookies[cookieName];
if (!requestAuthorization && requestCookie) {
let isExists = false;
for (const cookieToken of cookieTokenList) {
if (requestCookie === cookieToken) {
isExists = true;
break;
}
}
if (!isExists) {
response.status(401).send({ response: { stdout: "", stderr: "Unauthorized cookie." } });
return;
}
}
else if (requestAuthorization && requestAuthorization.startsWith("Bearer ") && requestCookie) {
if (requestAuthorization.substring(7) !== requestCookie) {
response.status(401).send({ response: { stdout: "", stderr: "Unauthorized bearer." } });
return;
}
}
else if (requestAuthorization && requestAuthorization.startsWith("Basic ") && !requestCookie) {
const credentialSplit = Buffer.from(requestAuthorization.split(" ")[1], "base64").toString().split(":");
if (credentialSplit[0].trim() === "" || credentialSplit[1].trim() === "") {
response.status(401).send({ response: { stdout: "", stderr: "Unauthorized basic." } });
return;
}
}
else {
response.status(401).send({ response: { stdout: "", stderr: "Require authorization." } });
return;
}
next();
};
//# sourceMappingURL=Service.js.map