angular security course

Author: Your Name

server/auth.middleware.ts

@@ -0,0 +1,16 @@
+import {Request, Response, NextFunction} from 'express';
+
+
+export function checkIfAuthenticated(req: Request, res: Response, next: NextFunction) {
+
+    if (req['userId']) {
+        next();
+    }
+    else {
+        res.sendStatus(403);
+    }
+
+
+}
+
+

server/get-user.middleware.ts

@@ -1,8 +1,8 @@
 
 
 
-import {Request, Response, NextFunction} from 'express';
 import {decodeJwt} from "./security.utils";
+import {Request, Response, NextFunction} from 'express';
 
 
 export function retrieveUserIdFromRequest(req: Request, res: Response, next: NextFunction) {
@@ -17,6 +17,9 @@ export function retrieveUserIdFromRequest(req: Request, res: Response, next: Nex
                 next();
         })
     }
+    else {
+      next();
+    }
 }
 
 

server/get-user.route.ts

@@ -10,7 +10,7 @@ export function getUser(req:Request, res:Response) {
     const user = db.findUserById(req["userId"]);
 
     if (user) {
-        res.status(200).json({email:user.email});
+        res.status(200).json({email:user.email, id:user.id});
     }
     else {
         res.sendStatus(204);

server/server.ts

@@ -10,6 +10,7 @@ import {getUser} from "./get-user.route";
 import {logout} from "./logout.route";
 import {login} from "./login.route";
 import {retrieveUserIdFromRequest} from "./get-user.middleware";
+import {checkIfAuthenticated} from "./auth.middleware";
 const bodyParser = require('body-parser');
 const cookieParser = require('cookie-parser');
 
@@ -29,10 +30,9 @@ const optionDefinitions = [
 
 const options = commandLineArgs(optionDefinitions);
 
-
 // REST API
 app.route('/api/lessons')
-    .get(readAllLessons);
+    .get(checkIfAuthenticated, readAllLessons);
 
 app.route('/api/signup')
     .post(createUser);
@@ -41,7 +41,7 @@ app.route('/api/user')
     .get(getUser);
 
 app.route('/api/logout')
-    .post( logout);
+    .post(checkIfAuthenticated, logout);
 
 app.route('/api/login')
     .post(login);

src/app/services/auth.service.ts

@@ -26,6 +26,9 @@ export class AuthService {
             .subscribe(user => this.subject.next(user ? user : ANONYMOUS_USER));
     }
 
+
+
+
     signUp(email:string, password:string ) {
 
         return this.http.post<User>('/api/signup', {email, password})