SheepstarStudio/Backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Created authenticate.ts#hasRank

Browse Source
This commit is contained in:
Mathias Wagner 2022-09-09 01:07:34 +02:00
parent 558e84ff7f
commit a4e8b0b839
Signed by: Mathias
GPG Key ID: B8DC354B0A1F5B44
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
api/middlewares/authenticate.ts
View File

@ -1,5 +1,5 @@
import {IToken, Token} from "../../models/Token"; import {IToken, Token} from "../../models/Token";
import {IUser, User} from "../../models/User"; import {IUser, Rank, User} from "../../models/User";
import {NextFunction, Request, Response} from "express"; import {NextFunction, Request, Response} from "express";
export interface AuthenticatedRequest extends Request { export interface AuthenticatedRequest extends Request {
@ -7,6 +7,7 @@ export interface AuthenticatedRequest extends Request {
user: IUser user: IUser
} }
/** Authenticate the user using the authorization header */
module.exports.authenticate = async (req: AuthenticatedRequest, res: Response, next: NextFunction) => { module.exports.authenticate = async (req: AuthenticatedRequest, res: Response, next: NextFunction) => {
// Get the token header // Get the token header
const authHeader = req.headers["authorization"]; const authHeader = req.headers["authorization"];
@ -25,4 +26,17 @@ module.exports.authenticate = async (req: AuthenticatedRequest, res: Response, n
if (req.user == null) return res.status(401).json({message: "The provided token is wrong"}); if (req.user == null) return res.status(401).json({message: "The provided token is wrong"});
next(); next();
}
/**
* Check if the current user has the provided rank
* @param rank The rank which is required to use the route
*/
export const hasRank = (rank: Rank) => (req: AuthenticatedRequest, res: Response, next: NextFunction) => {
// Admins have access to all routes
if (req.user.rank === Rank.ADMIN) return next();
if (req.user.rank === rank) return next();
res.status(401).json({message: "You don't have the permission to use this route"});
} }