api/middleware/Auth.ts

import { NextFunction, Response } from "express";
import Request from "../Request";
import jwt, { JwtPayload } from 'jsonwebtoken';
import User from "../../models/User";

export default async function Auth(request: Request, response: Response, next: NextFunction) {
    if (!request.user) {
        const { authorization } = request.headers;

        if (!authorization) {
            next();
            return;
        }

        const [type, token] = authorization.split(/ +/);

        if (type !== "Bearer") {
            return response.status(401).send({ error: "Only Bearer tokens are supported" });
        }

        if (!token) {
            return response.status(401).send({ error: "No Bearer token provided" });
        }

        try {
            const { _id, discord_id, username } = jwt.verify(token, process.env.JWT_SECRET!) as JwtPayload;
            
            if (!_id || !discord_id || !username) {
                throw new Error();
            }

            const user = await User.findOne({ _id, discord_id, username });

            if (!user) {
                throw new Error();
            }

            request.user = user;
        } 
        catch (e) {
            console.log(e);   
            return response.status(401).send({ error: "Invalid token provided" });
        }
    }

    next();
}
1	rakin	349	import { NextFunction, Response } from "express";
2			import Request from "../Request";
3			import jwt, { JwtPayload } from 'jsonwebtoken';
4			import User from "../../models/User";
5
6			export default async function Auth(request: Request, response: Response, next: NextFunction) {
7			if (!request.user) {
8			const { authorization } = request.headers;
9
10			if (!authorization) {
11			next();
12			return;
13			}
14
15			const [type, token] = authorization.split(/ +/);
16
17			if (type !== "Bearer") {
18			return response.status(401).send({ error: "Only Bearer tokens are supported" });
19			}
20
21			if (!token) {
22			return response.status(401).send({ error: "No Bearer token provided" });
23			}
24
25			try {
26			const { _id, discord_id, username } = jwt.verify(token, process.env.JWT_SECRET!) as JwtPayload;
27
28			if (!_id \|\| !discord_id \|\| !username) {
29			throw new Error();
30			}
31
32			const user = await User.findOne({ _id, discord_id, username });
33
34			if (!user) {
35			throw new Error();
36			}
37
38			request.user = user;
39			}
40			catch (e) {
41			console.log(e);
42			return response.status(401).send({ error: "Invalid token provided" });
43			}
44			}
45
46			next();
47			}