typescript

1 files changed, 51 insertions, 0 deletions

diff --git a/lib/auth.ts b/lib/auth.ts
new file mode 100644
index 00000000..0a8d43d3
--- /dev/null
+++ b/lib/auth.ts
@@ -0,0 +1,51 @@
+import fastifyPassport from "@fastify/passport";
+import { g } from "$lib/db";
+import { fail, getUser } from "$lib/utils";
+import config from "$config";
+import jwt from "passport-jwt";
+
+export const admin = {
+  preValidation: fastifyPassport.authenticate(
+    "jwt",
+    { session: false },
+    function (req, res, err, user, info) {
+      if (!user.admin) return res.code(401).send("unauthorized");
+      req.user = user;
+    },
+  ),
+};
+
+export const optional = {
+  preValidation: fastifyPassport.authenticate(
+    "jwt",
+    { session: false },
+    function (req, res, err, user, info) {
+      req.user = user;
+    },
+  ),
+};
+
+export const auth = {
+  preValidation: fastifyPassport.authenticate("jwt", {
+    authInfo: false,
+    session: false,
+  }),
+};
+
+export const requirePin = async ({ body, user }) => {
+  if (!user || (user.pin && user.pin !== body.pin)) fail("Invalid pin");
+};
+
+export const jwtStrategy = new jwt.Strategy(
+  {
+    jwtFromRequest: jwt.ExtractJwt.fromExtractors([
+      jwt.ExtractJwt.fromAuthHeaderAsBearerToken(),
+      (req) => (req.cookies ? req.cookies.token : null),
+    ]),
+    secretOrKey: config.jwt,
+  },
+  async (payload, next) => {
+    let user = await getUser(payload.id);
+    next(null, user);
+  },
+);