very-express/dist/templates/_middlewares/Authentication.ts

based on json schema and openapi, generate Express RestApi server with mongoDb

// {{headerComment}}


import { Request, Response, NextFunction } from "express";
import { JsonWebTokenError } from "jsonwebtoken";
import * as jwt from "../_plugins/auth/jwt.gen";
import log from "../_utils/logger.gen";
import responseGen from "../_utils/response.gen";

export default class Authentication {

    public middleware = (req: Request, res: Response, next: NextFunction) => {
        try {
            // gate keeper
            log.info("Authentication.middleware", req.headers["x-auth-index"], req.headers.authorization);
            const token = req.headers.authorization?.split(" ")[1];
            const accessTokenIndex = req.headers["x-auth-index"]?.toString();
            
            if (!token || !accessTokenIndex) {
                log.warn("invalid header", {
                    "X-Auth-Index": req.headers["x-auth-index"], 
                    "Authorization": req.headers.authorization
                });
                throw 401;
            }

            // verify token
            const tokenData = jwt.verifyToken(token, accessTokenIndex);

            // set req.user to the decoded token
            log.info("tokenValid", tokenData);
            req.user = tokenData;
            next();
        }
        catch (e: any) {
            if (typeof e === "number") {
                responseGen.send(res, e);
            }
            else if (e instanceof JsonWebTokenError) {
                responseGen.send(res, 400, { message: e?.message});
            }
            else {
                log.errorNoExit(e);
                responseGen.send(res, 500, { message: e?.message});
            }
        }
    };
}