feat: add authorization middleware

masb0ymas · masb0ymas · commit ff315c6a4d26 · 2025-04-03T14:41:52.000+07:00
diff --git a/src/app/middleware/authorization.ts b/src/app/middleware/authorization.ts
@@ -0,0 +1,39 @@
+import { NextFunction, Request, Response } from 'express'
+import { env } from '~/config/env'
+import { asyncHandler } from '~/lib/async-handler'
+import JwtToken from '~/lib/token/jwt'
+import SessionService from '../service/session'
+import _ from 'lodash'
+
+const jwt = new JwtToken({ secret: env.JWT_SECRET, expires: env.JWT_EXPIRES })
+const sessionService = new SessionService()
+
+export default function authorization() {
+  return asyncHandler(async (req: Request, res: Response, next: NextFunction) => {
+    const token = jwt.extract(req)
+    if (!token) {
+      return res.status(401).json({
+        statusCode: 401,
+        error: 'Unauthorized',
+        message: 'Unauthorized, cannot extract token from request',
+      })
+    }
+
+    const decoded = jwt.verify(token)
+    if (!decoded.data) {
+      return res.status(401).json({
+        statusCode: 401,
+        error: 'Unauthorized',
+        message: 'Unauthorized, invalid jwt',
+      })
+    }
+
+    const session = await sessionService.findByUserToken({
+      user_id: _.get(decoded, 'data.uid', ''),
+      token,
+    })
+
+    req.setState({ userLoginState: decoded.data, session })
+    next()
+  })
+}
