@xrengine/server-core/src/hooks/authenticate.ts

Shared components for XREngine server

import * as authentication from '@feathersjs/authentication'
import { BadRequest } from '@feathersjs/errors'
import { HookContext } from '@feathersjs/feathers'

import config from '../appconfig'
import { Application } from './../../declarations'

const { authenticate } = authentication.hooks

export default () => {
  return async (context: HookContext<Application>): Promise<HookContext> => {
    const { params } = context

    if (!context.params) context.params = {}
    const authHeader = params.headers?.authorization
    let authSplit
    if (authHeader) authSplit = authHeader.split(' ')
    let token, user
    if (authSplit) token = authSplit[1]
    if (token) {
      const key = await context.app.service('user-api-key').Model.findOne({
        where: {
          token: token
        }
      })
      if (key != null)
        user = await context.app.service('user').Model.findOne({
          include: [
            {
              model: context.app.service('scope').Model
            }
          ],
          where: {
            id: key.userId
          }
        })
    }
    if (user) {
      context.params.user = user
      return context
    }
    context = await authenticate('jwt')(context as any)
    // if (!context.params[config.authentication.entity]?.userId) throw new BadRequest('Must authenticate with valid JWT or login token')
    context.params.user =
      context.params[config.authentication.entity] && context.params[config.authentication.entity].userId
        ? await context.app.service('user').Model.findOne({
            include: [
              {
                model: context.app.service('scope').Model
              }
            ],
            where: {
              id: context.params[config.authentication.entity].userId
            }
          })
        : {}
    return context
  }
}