From eda5691cfcb3be0bb6ccf1b2ad4fa92801ad86c4 Mon Sep 17 00:00:00 2001 From: Pinapelz Date: Sun, 29 Jun 2025 19:55:51 -0700 Subject: seperate routes and middleware into seperate files --- backend/src/middleware/requireAuth.ts | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 backend/src/middleware/requireAuth.ts (limited to 'backend/src/middleware/requireAuth.ts') diff --git a/backend/src/middleware/requireAuth.ts b/backend/src/middleware/requireAuth.ts new file mode 100644 index 0000000..915d52b --- /dev/null +++ b/backend/src/middleware/requireAuth.ts @@ -0,0 +1,28 @@ +import express from 'express'; +import { prisma } from '../config/db'; + +export const requireAuth = async (req: express.Request, res: express.Response, next: express.NextFunction) => { + if (!req.session.userId) { + return res.status(401).json({ error: 'Authentication required' }); + } + + try { + const user = await prisma.user.findUnique({ + where: { id: req.session.userId }, + select: { id: true, username: true, email: true } + }); + + if (!user) { + req.session.destroy((err) => { + if (err) console.error('Session destroy error:', err); + }); + return res.status(401).json({ error: 'Invalid session' }); + } + + (req as any).user = user; + next(); + } catch (error) { + console.error('Auth middleware error:', error); + res.status(500).json({ error: 'Internal server error' }); + } +}; -- cgit v1.2.3