code-workshop-kit/src/middleware/jwt-middleware.ts

The future of remote code workshops & training

import { Middleware } from 'koa';
import _esmRequire from 'esm';
import jwt from 'jsonwebtoken';
import { WorkshopConfig } from '../types/CwkConfig';

export const jwtMiddleware = (dir: string): Middleware => {
  const esmRequire = _esmRequire(module);
  const workshop: WorkshopConfig = esmRequire(`${dir}/cwk.config.js`).default;

  return async (ctx, next) => {
    await next();

    if (ctx.url === '/api/login' && ctx.method === 'POST') {
      const providedPassword = ctx.headers['cwk-admin-password'];
      if (providedPassword && providedPassword === workshop.adminPassword) {
        // Mock user
        const username = ctx.headers['cwk-user'];
        if (workshop.appKey) {
          const token = jwt.sign({ username }, workshop.appKey, { expiresIn: '12h' });
          ctx.status = 200;
          ctx.body = {
            token,
          };
        }
      } else {
        ctx.status = 401;
      }
    }
  };
};