ksmf/src/proxy/Auth.js

Modular Microframework for create minimalistic CLI/Web application or REST API

class ProxyAuth {

    /**
     * @description Get a valid user acount or null
     * @param {Object} req 
     * @param {Object} res 
     * @param {Object} inf 
     * @returns {Object|null} User { username: STRING; name: STRING; } 
     */
    verify(req, res, inf) {
        if (!inf?.security || !inf?.origin?.token) {
            return null;
        }
        const token = this.getToken(inf.origin.token);
        return this.getUser(token, inf);
    }

    /**
     * @description Basic token decode: base64(username:password)
     * @param {String} token 
     * @returns {Object} Token { username: STRING; password: STRING; }
     */
    getToken(token) {
        if (!token) return null;
        let bearer = token.split(' ');
        if (!(bearer instanceof Array)) {
            return null;
        }
        let tmp = Buffer.from(bearer[1], 'base64').toString();
        let bea = tmp.split(':');
        return {
            username: bea[0],
            password: bea[1]
        }
    }

    /**
     * @description Get a valid user acount or null
     * @param {Object} token 
     * @param {Object} inf 
     * @returns {Object|null} User { username: STRING; name: STRING; }
     */
    getUser(token, inf) {
        if (!token || !inf || !inf.security || !inf.security.usr)
            return null;
        const users = inf.security.usr;
        const account = users[token.username];
        if (!account)
            return null;
        if (account.password !== this.getPassword(token.password))
            return null;
        const user = {username: token.username, ...account};
        delete user['password'];
        return user;
    }

    /**
     * @description get a password ready to compare
     * @param {String} pass 
     * @returns {String} pass
     */
    getPassword(pass) {
        return pass;
    }
}

module.exports = ProxyAuth;