angular security course

Author: Your Name

server/create-user.route.ts

@@ -44,3 +44,4 @@ async function createUserAndSession(res:Response, credentials) {
 
 
 
+

server/get-user.middleware.ts

@@ -0,0 +1,41 @@
+
+
+
+import {Request, Response, NextFunction} from 'express';
+import {decodeJwt} from "./security.utils";
+
+
+export function retrieveUserIdFromRequest(req: Request, res: Response, next: NextFunction) {
+
+    const jwt = req.cookies["SESSIONID"];
+
+    if (jwt) {
+        handleSessionCookie(jwt, req)
+            .then(() => next())
+            .catch(err => {
+                console.error(err);
+                next();
+        })
+    }
+}
+
+
+
+async function handleSessionCookie(jwt:string, req: Request) {
+    try {
+
+        const payload = await decodeJwt(jwt);
+
+        req["userId"] = payload.sub;
+
+    }
+    catch(err) {
+        console.log("Error: Could not extract user from request:", err.message);
+    }
+}
+
+
+
+
+
+

server/get-user.route.ts

@@ -1,15 +1,13 @@
 
 
 import {Request, Response} from "express";
+import {db} from "./database";
 
 
 
 export function getUser(req:Request, res:Response) {
 
-    //TODO retrieve the actual user based on JWT content
-    const user = {
-        email:'test@gmail.com'
-    };
+    const user = db.findUserById(req["userId"]);
 
     if (user) {
         res.status(200).json(user);

server/security.utils.ts

@@ -30,6 +30,20 @@ export async function createSessionToken(userId:string) {
 }
 
 
+export async function decodeJwt(token:string) {
+
+    const payload = await jwt.verify(token, RSA_PUBLIC_KEY);
+
+    console.log("decoded JWT payload", payload);
+
+    return payload;
+}
+
+
+
+
+
+
 
 
 

server/server.ts

@@ -9,13 +9,15 @@ import {createUser} from "./create-user.route";
 import {getUser} from "./get-user.route";
 import {logout} from "./logout.route";
 import {login} from "./login.route";
+import {retrieveUserIdFromRequest} from "./get-user.middleware";
 const bodyParser = require('body-parser');
 const cookieParser = require('cookie-parser');
 
 
 const app: Application = express();
 
 app.use(cookieParser());
+app.use(retrieveUserIdFromRequest);
 app.use(bodyParser.json());