@m5kdev/backend 0.1.0

package/src/modules/auth/auth.middleware.ts

@@ -0,0 +1,62 @@
+import { fromNodeHeaders } from "better-auth/node";
+import type { InferSelectModel } from "drizzle-orm";
+import type { NextFunction, Request, Response } from "express";
+import * as auth from "#modules/auth/auth.db";
+import type { BetterAuth } from "#modules/auth/auth.lib";
+import { runWithPosthogRequestState } from "#utils/posthog";
+
+const { users, sessions } = auth;
+
+type User = InferSelectModel<typeof users>;
+type Session = InferSelectModel<typeof sessions>;
+
+export type AuthRequest = Request & { user?: User; session?: Session };
+
+export type AuthMiddleware = (req: AuthRequest, res: Response, next: NextFunction) => void;
+
+export function createAuthMiddleware(auth: BetterAuth): AuthMiddleware {
+  return (req: AuthRequest, res: Response, next: NextFunction) => {
+    auth.api
+      .getSession({
+        headers: fromNodeHeaders(req.headers),
+      })
+      .then((data) => {
+        if (!data?.user || !data?.session) {
+          res.status(401).json({ message: "Unauthorized" });
+        } else {
+          req.user = data.user as User;
+          req.session = data.session as Session;
+          runWithPosthogRequestState({ disableCapture: Boolean(req.session?.impersonatedBy) }, () =>
+            next()
+          );
+        }
+      })
+      .catch(() => {
+        res.status(500).json({ message: "Unable to authenticate" });
+      });
+  };
+}
+
+export function createRoleAuthMiddleware(auth: BetterAuth): (role: string) => AuthMiddleware {
+  return (role: string) => (req: AuthRequest, res: Response, next: NextFunction) => {
+    auth.api
+      .getSession({
+        headers: fromNodeHeaders(req?.headers),
+      })
+      .then((data) => {
+        const user = (data?.user as User) || null;
+        if (!data?.session || user?.role !== role) {
+          res.status(401).json({ message: "Unauthorized" });
+        } else {
+          req.user = user;
+          req.session = data?.session as Session;
+          runWithPosthogRequestState({ disableCapture: Boolean(req.session?.impersonatedBy) }, () =>
+            next()
+          );
+        }
+      })
+      .catch(() => {
+        res.status(500).json({ message: "Unable to authenticate" });
+      });
+  };
+}