Add methods for requiring more specific levels of teamleader auth

+ Add AuthError
This commit is contained in:
Stephan
2022-05-27 23:08:23 +02:00
parent a9c182cf64
commit 2a33b703bc
5 changed files with 52 additions and 3 deletions
+5 -1
View File
@@ -6,13 +6,17 @@ import { authClient } from "../../lib/redis";
import jwt, { JsonWebTokenError, JwtPayload } from "jsonwebtoken";
import prisma from "../../lib/prisma";
const JWT_SECRET = process.env.JWT_SECRET || "secret";
const JWT_SECRET = process.env.JWT_SECRET;
export const verifyAuthorizationFormat = (authorization: string) => /^Bearer .+$/.test(authorization);
export const getBearerToken = (authorization: string) => authorization.slice(7);
export const requireAuthentication = async (req: Request, res: Response, next: NextFunction) => {
if (!JWT_SECRET) {
throw new Error("JWT_SECRET not set");
}
const { authorization } = req.headers;
if (!authorization) {