Function createAuthMiddleware

apps/hash-api/src/auth/create-auth-handlers.ts:208–257

(params: {
  logger: Logger;
  context: ImpureGraphContext;
})

};

export const createAuthMiddleware = (params: {
  logger: Logger;
  context: ImpureGraphContext;
}): RequestHandler => {
  const { logger, context } = params;

  return async (req, _res, next) => {
    const authHeader = req.header("authorization");
    const hasAuthHeader = authHeader?.startsWith("Bearer ") ?? false;

    const accessOrSessionToken =
      hasAuthHeader && typeof authHeader === "string"
        ? authHeader.slice(7, authHeader.length)
        : undefined;

    /** Check if the Bearer token is a valid OAuth2 token */
    if (accessOrSessionToken) {
      const introspectionResult = await hydraAdmin.introspectOAuth2Token({
        token: accessOrSessionToken,
      });
      if (introspectionResult.data.active && introspectionResult.data.sub) {
        const user = await getUser(
          context,
          { actorId: publicUserAccountId },
          {
            kratosIdentityId: introspectionResult.data.sub,
          },
        );
        if (user) {
          req.user = user;
          next();
          return;
        }
      }
    }

    const { session, user } = await getUserAndSession({
      context,
      cookie: req.header("cookie"),
      logger,
      sessionToken: accessOrSessionToken,
    });
    if (session) {
      req.session = session;
      req.user = user;
    }

    next();
  };
};