1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
import config from "$config";
import { fail, getUser } from "$lib/utils";
import jwt from "jsonwebtoken";
import { getCookie } from "hono/cookie";
const extractToken = (c) => {
const authHeader = c.req.header("authorization");
if (authHeader?.startsWith("Bearer ")) return authHeader.slice(7);
return getCookie(c, "token") || null;
};
const authenticate = async (c) => {
const token = extractToken(c);
if (!token) return null;
try {
const payload = jwt.verify(token, config.jwt);
let { id } = payload as any;
const url = c.req.path;
const method = c.req.method;
const wl = { GET: ["/invoice", "/payments"], POST: ["/invoice"] };
if (id.endsWith("-ro") && wl[method]?.some((p) => url.startsWith(p))) id = id.slice(0, -3);
return await getUser(id);
} catch {
return null;
}
};
export const auth = async (c, next) => {
const user = await authenticate(c);
if (!user) return c.json("unauthorized", 401);
c.set("user", user);
await next();
};
export const optional = async (c, next) => {
const user = await authenticate(c);
if (user) c.set("user", user);
await next();
};
export const admin = async (c, next) => {
const user = await authenticate(c);
if (!user?.admin) return c.json("unauthorized", 401);
c.set("user", user);
await next();
};
export const requirePin = async ({ body, user }) => {
if (!user || (user.pin && user.pin !== body.pin)) fail("Invalid pin");
};
|
