auth-server-helper/lib/Gateway.ts

/*
 * Copyright (C) Sapphirecode - All Rights Reserved
 * This file is part of Auth-Server-Helper which is released under MIT.
 * See file 'LICENSE' for full license details.
 * Created by Timo Hocker <timo@scode.ovh>, December 2020
 */

import { run_regex } from '@sapphirecode/utilities';
import authority from './Authority';

type AnyFunc = (...args: unknown) => unknown;
type Gateway = (req: Request, res: Response, next: AnyFunc) => Promise<void>;

interface GatewayOptions {
  redirect_url: string;
  cookie_name?: string;
}

class GatewayClass {
  private _options: GatewayOptions;

  public constructor (options: GatewayOptions) {
    this._options = options;
  }

  private redirect (res): void {
    res.statusCode = 302;
    res.setHeader ('Location', this._options.redirect_url);
    res.end ();
  }

  private get_header_auth (req: Request): string | null {
    const auth_header = req.headers.get ('Authorization');
    const auth = (/(?<type>\w)+ (?<data>.*)/u).exec (auth_header);
    if (auth === null)
      return null;
    if (auth.groups.type !== 'Bearer')
      return null;
    return auth.groups.data;
  }

  private get_cookie_auth (req: Request): string | null {
    if (typeof this._options.cookie_name === 'undefined')
      return null;
    let auth = null;
    run_regex (
      /[\^;](?<name>[^;=]+)=(?<value>[^;]+)/gu,
      req.headers.get ('cookie'),
      (res) => {
        if (res.groups.name === this._options.cookie_name)
          auth = res.groups.value;
      }
    );
    return auth;
  }

  private authenticate (req: Request): Promise<boolean> {
    let auth = this.get_header_auth (req);
    if (auth === null)
      auth = this.get_cookie_auth (req);
    if (auth === null)
      return false;

    return authority.verify (auth).authorized;
  }

  public process_request (
    req: Request,
    res: Response,
    next: AnyFunc
  ): Promise<void> {
    if (this.authenticate (req))
      return next ();
    return this.redirect (res);
  }
}

export default function create_gateway (options: GatewayOptions): Gateway {
  const g = new GatewayClass (options);
  return g.process_request;
}