datasquirel/users/user-auth.js

/**
 * ==============================================================================
 * Imports
 * ==============================================================================
 */
const decrypt = require("../functions/decrypt");

/** ****************************************************************************** */
/** ****************************************************************************** */
/** ****************************************************************************** */
/** ****************************************************************************** */
/** ****************************************************************************** */
/** ****************************************************************************** */

/**
 * ==============================================================================
 * Main Function
 * ==============================================================================
 * @param {Object} request - Http request object
 * @param {String} encryptionKey - Encryption Key
 * @param {String} encryptionSalt - Encryption Salt
 */
module.exports = async function ({ request, encryptionKey, encryptionSalt }) {
    /**
     * Grab the payload
     *
     * @description Grab the payload
     */
    let userPayload = decrypt({
        encryptedString: request.cookies.datasquirelAuthKey,
        encryptionKey,
        encryptionSalt,
    });

    /**
     * Grab the payload
     *
     * @description Grab the payload
     */
    if (!userPayload) {
        return {
            success: false,
            payload: null,
            msg: "Couldn't Decrypt cookie",
        };
    }

    /**
     * Grab the payload
     *
     * @description Grab the payload
     */
    let userObject = JSON.parse(userPayload);

    if (!userObject.csrf_k) {
        return {
            success: false,
            payload: null,
            msg: "No CSRF_K in decrypted payload",
        };
    }

    /** ********************************************** */
    /** ********************************************** */
    /** ********************************************** */

    /**
     * Grab the payload
     *
     * @description Grab the payload
     */
    if (csrf && !req.headers["x-csrf-auth"]?.match(new RegExp(`${userObject.csrf_k}`))) {
        return {
            success: false,
            payload: null,
            msg: "CSRF_K requested but does not match payload",
        };
    }

    /** ********************************************** */
    /** ********************************************** */
    /** ********************************************** */

    /**
     * Return User Object
     *
     * @description Return User Object
     */
    return {
        success: true,
        payload: userObject,
    };
};

/** ********************************************** */
/** ********************************************** */
/** ********************************************** */