Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 | 12x 12x 21x 21x 72x 72x 60x 2x 14x 14x 58x 58x 57x 5x 52x 52x 45x 45x 36x 45x | import { MiddlewareObj, Request } from "@middy/core";
import { createError } from "@middy/util";
import { getAuthDetails, lookupUserAttributes } from "libs/api/auth/user";
import { FullUser } from "shared-types";
import { isCmsUser } from "shared-utils";
import {
getActiveStatesForUserByEmail,
getLatestActiveRoleByEmail,
} from "../user-management/userManagementService";
import { storeAuthUserInRequest } from "./utils";
export type IsAuthenticatedOptions = {
setToContext?: boolean;
};
const defaults: IsAuthenticatedOptions = {
setToContext: false,
};
/**
* Authenticates the user and stores their data in internal storage.
* @param {object} opts Options for running the middleware
* @param {boolean} opts.setToContext [false] if true, also stores the package in context, so it can be accessed in the handler
* @returns {MiddleObj} middleware to authenticate the user before the handler runs
*/
export const isAuthenticated = (opts: IsAuthenticatedOptions = {}): MiddlewareObj => {
const options = { ...defaults, ...opts };
return {
before: async (request: Request) => {
let authDetails;
try {
authDetails = getAuthDetails(request.event);
if (!authDetails || !authDetails.userId || !authDetails.poolId) {
throw new Error("No user or pool id");
}
} catch (err) {
console.error(err);
throw createError(401, JSON.stringify({ message: "User is not authenticated" }));
}
const { userId, poolId } = authDetails;
const userAttributes = await lookupUserAttributes(userId, poolId);
if (!userAttributes?.email) {
// if you don't use the expose option here, you won't be able to see the error message
throw createError(500, JSON.stringify({ message: "User is invalid" }), { expose: true });
}
const { email } = userAttributes;
const latestActiveRole = await getLatestActiveRoleByEmail(email);
const user: FullUser = {
...userAttributes,
role: latestActiveRole?.role ?? "norole",
states: [],
};
if (!isCmsUser(user)) {
user.states = await getActiveStatesForUserByEmail(email, user.role);
}
storeAuthUserInRequest(user, request, options.setToContext);
},
};
};
|