@jcbuisson/express-x 1.5.0 → 1.5.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jcbuisson/express-x",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "",
   "type": "module",
   "main": "src/index.mjs",

package/src/common-hooks.mjs

@@ -12,23 +12,6 @@ export async function hashPassword(context) {
 }
 
 
-export async function authenticate(context) {
-   console.log('authenticate hook', context.transport, context.name, context.action, context?.connection?.accessToken)
-   return context
-
-   if (context.transport === 'ws') {
-      // for WS transport, just check that connection.accessToken is set and valid
-      if (!context?.connection?.accessToken) throw new Error("WS connection is not secured by a JWT access token")
-      // TODO: check token validity
-
-   } else if (context.transport === 'http') {
-      // for HTTP transport, check that the associated request has a header with a valid JWT
-      // TODO: check headers for access token
-   }
-   return (context)
-}
-
-
 // remove `field` from `result`
 export function protect(field) {
    return async (context) => {
@@ -44,10 +27,12 @@ export function protect(field) {
 }
 
 
-export async function setSessionJWT(context) {
-   if (context.transport === 'ws') {
-      // associate JWT token to WS connection to mark it as secure
-      context.connection.accessToken = context.result.accessToken
-   }
-   return context
+export async function isAuthenticated(context) {
+   if (context.transport !== 'ws') return
+   // extract user from connection data
+   const id = context.params.connectionId
+   const connection = await context.app.service('Connection')._findUnique({ where: { id }})
+   const data = JSON.parse(connection.data)
+   const user = data.user
+   if (!user) throw Error(`AuthCode hook: not authenticated ${id}`)
 }

package/src/index.mjs

@@ -1,10 +1,11 @@
 
 import { expressX } from './server.mjs'
-import { hashPassword, protect, } from './common-hooks.mjs'
+import { hashPassword, protect, isAuthenticated } from './common-hooks.mjs'
 
 export {
    expressX,
 
    hashPassword,
    protect,
+   isAuthenticated,
 }