very-express/dist/templates/_middlewares/Authentication.ts

based on json schema and openapi, generate Express RestApi server with mongoDb

// {{headerComment}}
import { Request, Response, NextFunction } from "express";
import { JsonWebTokenError } from "jsonwebtoken";
import JWTService from "../_services/auth/JWTService.gen";
import log from "../_utils/logger.gen";
import { VexResErr } from "../_types/vex";

class Authentication {

    private JWTService = new JWTService();

    public middleware = (req: Request, res: Response, next: NextFunction) => {
        try {
            // gate keeper
            // log.info("Authentication.middleware", req.headers["x-auth-index"], req.headers.authorization);
            const token = req.headers.authorization?.split(" ")[1];
            const accessTokenIndex = req.headers["x-auth-index"]?.toString();
            
            if (!token || !accessTokenIndex) {
                log.warn("invalid header", {
                    "X-Auth-Index": req.headers["x-auth-index"], 
                    "Authorization": req.headers.authorization
                });
                throw 401;
            }

            // verify token
            const tokenData = this.JWTService.verifyToken(token, accessTokenIndex);
            req.user = tokenData;
            next();
        }
        catch (e: any) {
            if (typeof e === "number") {
                throw new VexResErr(e, undefined);
            }
            else if (e instanceof JsonWebTokenError) {
                throw new VexResErr(400, undefined, e?.message);
            }
            else {
                throw new VexResErr(500, undefined, e?.message);
            }
        }
    };
}

export default new Authentication();