standardnotes-server/packages/auth/src/Controller/AuthMiddlewareWithoutResponse.ts

import { NextFunction, Request, Response } from 'express'
import { inject, injectable } from 'inversify'
import { BaseMiddleware } from 'inversify-express-utils'
import TYPES from '../Bootstrap/Types'
import { AuthenticateRequest } from '../Domain/UseCase/AuthenticateRequest'

@injectable()
export class AuthMiddlewareWithoutResponse extends BaseMiddleware {
  constructor(@inject(TYPES.AuthenticateRequest) private authenticateRequest: AuthenticateRequest) {
    super()
  }

  async handler(request: Request, response: Response, next: NextFunction): Promise<void> {
    try {
      const authenticateRequestResponse = await this.authenticateRequest.execute({
        authorizationHeader: request.headers.authorization,
      })

      if (!authenticateRequestResponse.success) {
        return next()
      }

      response.locals.user = authenticateRequestResponse.user
      response.locals.session = authenticateRequestResponse.session
      response.locals.readOnlyAccess = authenticateRequestResponse.session?.readonlyAccess ?? false

      return next()
    } catch (error) {
      return next()
    }
  }
}