ready-to-go-node-template/template/src/modules/v1/admin/authentication/admin-authentication.js

A node boilerplate template with built-in support for socket and MongoDB using Mongoose.

import passport from 'passport';
import { Strategy } from 'passport-strategy';
import { Session } from '../../admin/models/session-model';
import { Admin } from '../models/admin-model';
import { responseHandler } from '../../../../utils/response-handler';

class CustomAdminAuthStrategy extends Strategy {
    constructor() {
        super();
    }

    async authenticate(req, options) {
        const token = req.headers.authorization;

        if (!token) {
            return this.fail('Missing authentication token', 401);
        }

        const sessionToken = token.split(' ')[1];

        try {
            const result = await Session.findOne({ session_token: sessionToken, status: 1 });

            if (!result) {
                return this.fail('Invalid session token', 401);
            }

            const admin = await Admin.findById(result.user_id);

            if (!admin) {
                return this.fail('Access denied', 401);
            }

            this.success(admin);

        } catch (error) {
            return this.error('Internal server error', error);
        }
    }
}

// Create an instance of the custom strategy and use it with Passport
const customAdminAuthStrategy = new CustomAdminAuthStrategy();

class AdminAuthentication {
    constructor() {
        // Use the custom strategy instead of JWT
        passport.use('admin-custom', customAdminAuthStrategy);
    }

    async check(req, res, next) {
        passport.authenticate('admin-custom', { session: false }, (err, user) => {
            if (err) {
                return responseHandler.errorResponse(res, err);
            }
            if (!user) {
                return responseHandler.errorResponse(res, {}, 'Authentication failed', 401);
            }

            req.user = user;
            next();
        })(req, res, next);
    }
}

export default new AdminAuthentication();