Moved contents of seasoned_api up to root folder
This commit is contained in:
31
src/webserver/middleware/mustBeAdmin.js
Normal file
31
src/webserver/middleware/mustBeAdmin.js
Normal file
@@ -0,0 +1,31 @@
|
||||
const establishedDatabase = require("../../database/database");
|
||||
|
||||
const mustBeAdmin = (req, res, next) => {
|
||||
let database = establishedDatabase;
|
||||
|
||||
if (req.loggedInUser === undefined) {
|
||||
return res.status(401).send({
|
||||
success: false,
|
||||
message: "You must be logged in."
|
||||
});
|
||||
} else {
|
||||
database
|
||||
.get(
|
||||
`SELECT admin FROM user WHERE user_name IS ?`,
|
||||
req.loggedInUser.username
|
||||
)
|
||||
.then(isAdmin => {
|
||||
console.log(isAdmin, req.loggedInUser);
|
||||
if (isAdmin.admin == 0) {
|
||||
return res.status(401).send({
|
||||
success: false,
|
||||
message: "You must be logged in as a admin."
|
||||
});
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
return next();
|
||||
};
|
||||
|
||||
module.exports = mustBeAdmin;
|
||||
11
src/webserver/middleware/mustBeAuthenticated.js
Normal file
11
src/webserver/middleware/mustBeAuthenticated.js
Normal file
@@ -0,0 +1,11 @@
|
||||
const mustBeAuthenticated = (req, res, next) => {
|
||||
if (req.loggedInUser === undefined) {
|
||||
return res.status(401).send({
|
||||
success: false,
|
||||
message: "You must be logged in."
|
||||
});
|
||||
}
|
||||
return next();
|
||||
};
|
||||
|
||||
module.exports = mustBeAuthenticated;
|
||||
35
src/webserver/middleware/mustHaveAccountLinkedToPlex.js
Normal file
35
src/webserver/middleware/mustHaveAccountLinkedToPlex.js
Normal file
@@ -0,0 +1,35 @@
|
||||
const establishedDatabase = require("../../database/database");
|
||||
|
||||
const mustHaveAccountLinkedToPlex = (req, res, next) => {
|
||||
let database = establishedDatabase;
|
||||
const loggedInUser = req.loggedInUser;
|
||||
|
||||
if (loggedInUser === undefined) {
|
||||
return res.status(401).send({
|
||||
success: false,
|
||||
message: "You must have your account linked to a plex account."
|
||||
});
|
||||
} else {
|
||||
database
|
||||
.get(
|
||||
`SELECT plex_userid FROM settings WHERE user_name IS ?`,
|
||||
loggedInUser.username
|
||||
)
|
||||
.then(row => {
|
||||
const plex_userid = row.plex_userid;
|
||||
|
||||
if (plex_userid === null || plex_userid === undefined) {
|
||||
return res.status(403).send({
|
||||
success: false,
|
||||
message:
|
||||
"No plex account user id found for your user. Please authenticate your plex account at /user/authenticate."
|
||||
});
|
||||
} else {
|
||||
req.loggedInUser.plex_userid = plex_userid;
|
||||
return next();
|
||||
}
|
||||
});
|
||||
}
|
||||
};
|
||||
|
||||
module.exports = mustHaveAccountLinkedToPlex;
|
||||
32
src/webserver/middleware/reqTokenToUser.js
Normal file
32
src/webserver/middleware/reqTokenToUser.js
Normal file
@@ -0,0 +1,32 @@
|
||||
/* eslint-disable no-param-reassign */
|
||||
const configuration = require("../../config/configuration").getInstance();
|
||||
const Token = require("../../user/token");
|
||||
|
||||
const secret = configuration.get("authentication", "secret");
|
||||
|
||||
// Token example:
|
||||
// curl -i -H "Authorization:[token]" localhost:31459/api/v1/user/history
|
||||
|
||||
const reqTokenToUser = (req, res, next) => {
|
||||
const cookieAuthToken = req.cookies.authorization;
|
||||
const headerAuthToken = req.headers.authorization;
|
||||
|
||||
if (cookieAuthToken || headerAuthToken) {
|
||||
try {
|
||||
const token = Token.fromString(
|
||||
cookieAuthToken || headerAuthToken,
|
||||
secret
|
||||
);
|
||||
req.loggedInUser = token.user;
|
||||
} catch (error) {
|
||||
req.loggedInUser = undefined;
|
||||
}
|
||||
} else {
|
||||
// guest session
|
||||
console.debug("No auth token in header or cookie.");
|
||||
}
|
||||
|
||||
next();
|
||||
};
|
||||
|
||||
module.exports = reqTokenToUser;
|
||||
Reference in New Issue
Block a user