Source: middleware/authenticator.js

  1. const admin = require("firebase-admin");
  2. const express = require("express");
  4. /**
  5.  * Middleware that verifies Firebase user and gets their uid using email.
  6.  * NOTE: This is only meant for dev purposes. Never use this in production code.
  7.  * @param {*} req 
  8.  * @param {string} req.body.email The email of the user
  9.  * @param {*} res 
  10.  * @param {callback} next - Next function to call
  11.  */
  12. const devGetUser = async(req, res, next) => {
  13.   if (req.body.email) {
  14.     admin.auth().getUserByEmail(req.body.email)
  15.     .then(function(userRecord) {
  16.       // See the UserRecord reference doc for the contents of userRecord.
  17.       res.locals.uid = userRecord.uid;
  18.       next();
  19.     })
  20.     .catch(function(error) {
  21.       res.status(401).send('Unauthorized');
  22.     });
  23.   } else {
  24.     res.status(401).send('Unauthorized');
  25.   }
  26. }
  28. /**
  29.  * Middleware that verifies Firebase user and gets their uid using their authentication token in the header.
  30.  * @param {*} req
  31.  * @param {string} req.headers.authorization The authorization ID token
  32.  * @param {*} res 
  33.  * @param {callback} next - Next function to call
  34.  */
  35. const checkAuth = async (req, res, next) => {
  36.   if (req.headers.authorization) {
  37.     admin.auth().verifyIdToken(req.headers.authorization)
  38.       .then((decodedToken) => {
  39.         res.locals.uid = decodedToken.uid;
  40.         res.locals.email = decodedToken.email;
  41.         next();
  42.       }).catch(function(error) {
  43.         res.status(401).send('Unauthorized');
  44.       });
  45.   } else {
  46.     res.status(401).send('Unauthorized');
  47.   }
  48. }
  50. module.exports = {email: devGetUser, token: checkAuth};