Colubrina/backend/lib/authorize.js

44 lines
1.1 KiB
JavaScript

const { User, Theme, Session } = require("../models")
const Errors = require("./errors")
module.exports = async function (req, res, next) {
try {
if (req.header("Authorization") && req.header("Authorization") !== "null") {
const token = req.header("Authorization")
const session = await Session.findOne({ where: { session: token } })
if (session) {
const user = await User.findOne({
where: { id: session.userId },
attributes: {
exclude: ["totp", "password"]
},
include: [
{
model: Theme,
as: "themeObject"
}
]
})
if (user) {
await user.update({
lastSeenAt: new Date().toISOString()
})
req.user = user
next()
}
} else {
res.status(401).json(Errors.unauthorized)
}
} else {
res.status(401).json({
errors: [
{
message: "You need to be logged in."
}
]
})
}
} catch (e) {
console.log(e)
}
}