2016-03-26 18:19:10 +08:00
|
|
|
///<reference path="ExtendedRequest.d.ts"/>
|
|
|
|
///<reference path="../../typings/main.d.ts"/>
|
|
|
|
|
2016-03-20 00:31:42 +08:00
|
|
|
import {NextFunction, Request, Response} from "express";
|
|
|
|
import {Error, ErrorCodes} from "../../common/entities/Error";
|
|
|
|
import {UserRoles} from "../../common/entities/User";
|
2016-04-22 19:23:44 +08:00
|
|
|
import {ObjectManagerRepository} from "../model/ObjectManagerRepository";
|
2016-03-20 00:31:42 +08:00
|
|
|
|
2016-03-26 18:19:10 +08:00
|
|
|
export class AuthenticationMWs {
|
2016-03-20 00:31:42 +08:00
|
|
|
|
2016-05-09 23:04:56 +08:00
|
|
|
public static authenticate(req:Request, res:Response, next:NextFunction) {
|
|
|
|
/* if (typeof req.session.user === 'undefined') {
|
|
|
|
return next(new Error(ErrorCodes.NOT_AUTHENTICATED));
|
|
|
|
}*/
|
2016-04-10 00:06:29 +08:00
|
|
|
//TODO: uncomment
|
2016-03-20 00:31:42 +08:00
|
|
|
return next();
|
|
|
|
}
|
2016-05-09 23:04:56 +08:00
|
|
|
|
|
|
|
public static authorise(role:UserRoles) {
|
2016-03-20 00:31:42 +08:00
|
|
|
return (req:Request, res:Response, next:NextFunction) => {
|
|
|
|
if (req.session.user.role < role) {
|
2016-03-26 18:19:10 +08:00
|
|
|
return next(new Error(ErrorCodes.NOT_AUTHORISED));
|
2016-03-20 00:31:42 +08:00
|
|
|
}
|
|
|
|
return next();
|
|
|
|
};
|
|
|
|
}
|
2016-05-09 23:04:56 +08:00
|
|
|
|
|
|
|
public static inverseAuthenticate(req:Request, res:Response, next:NextFunction) {
|
2016-03-20 00:31:42 +08:00
|
|
|
if (typeof req.session.user !== 'undefined') {
|
2016-03-26 18:19:10 +08:00
|
|
|
return next(new Error(ErrorCodes.ALREADY_AUTHENTICATED));
|
2016-03-20 00:31:42 +08:00
|
|
|
}
|
|
|
|
return next();
|
|
|
|
}
|
2016-05-09 23:04:56 +08:00
|
|
|
|
|
|
|
public static login(req:Request, res:Response, next:NextFunction) {
|
2016-03-20 00:31:42 +08:00
|
|
|
//not enough parameter
|
2016-05-09 23:04:56 +08:00
|
|
|
if ((typeof req.body === 'undefined') || (typeof req.body.loginCredential === 'undefined') || (typeof req.body.loginCredential.username === 'undefined') ||
|
2016-03-20 23:54:30 +08:00
|
|
|
(typeof req.body.loginCredential.password === 'undefined')) {
|
2016-03-20 00:31:42 +08:00
|
|
|
return next();
|
|
|
|
}
|
|
|
|
//lets find the user
|
2016-04-22 19:23:44 +08:00
|
|
|
ObjectManagerRepository.getInstance().getUserManager().findOne({
|
2016-05-09 23:04:56 +08:00
|
|
|
name: req.body.loginCredential.username,
|
|
|
|
password: req.body.loginCredential.password
|
2016-03-20 00:31:42 +08:00
|
|
|
}, (err, result) => {
|
|
|
|
if ((err) || (!result)) {
|
2016-03-26 18:19:10 +08:00
|
|
|
return next(new Error(ErrorCodes.CREDENTIAL_NOT_FOUND));
|
2016-03-20 00:31:42 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
req.session.user = result;
|
|
|
|
|
|
|
|
return next();
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
}
|