All files / lib/middlewares loginRequired.ts

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
 
 
 
 
 
16x
 
16x
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
import Crowi from 'server/crowi'
import auth from '../util/auth'
import Debug from 'debug'
 
export default (crowi: Crowi) => {
  const debug = Debug('crowi:middlewares:loginRequired')
 
  return async (req, res, next) => {
    const User = crowi.model('User')
    const config = crowi.getConfig()
    const { originalUrl } = req
    const query = originalUrl === '/' ? '' : `?continue=${originalUrl}`
    const isAuthPage = originalUrl.startsWith('/me/auth/')
    const isAPI = originalUrl.startsWith('/_api/')
 
    if (!isAuthPage && auth.isAccessTokenExpired(req)) {
      const success = await auth.reauth(req, config)
      if (!success) {
        res.redirect('/logout')
      }
    }
 
    if (req.user && '_id' in req.user) {
      const { 'auth:requireThirdPartyAuth': requireThirdPartyAuth = '' } = config.crowi
      const hasValidThirdPartyId = req.user.hasValidThirdPartyId()
      if (!isAuthPage && !isAPI && requireThirdPartyAuth && !hasValidThirdPartyId) {
        return res.redirect(`/me/auth/third-party${query}`)
      }
 
      if (req.user.status === User.STATUS_ACTIVE) {
        // Active の人だけ先に進める
        return next()
      } else if (req.user.status === User.STATUS_REGISTERED) {
        return res.redirect('/login/error/registered')
      } else if (req.user.status === User.STATUS_SUSPENDED) {
        return res.redirect('/login/error/suspended')
      } else if (req.user.status === User.STATUS_INVITED) {
        return res.redirect('/login/invited')
      }
    }
 
    if (isAPI) {
      return res.sendStatus(403)
    }
 
    return res.redirect(`/login${query}`)
  }
}