ikechukwukalu / food-hut-adonisjs

import { AuthenticationException } from '@adonisjs/auth/build/standalone'

import type { GuardsList } from '@ioc:Adonis/Addons/Auth'

import type { HttpContextContract } from '@ioc:Adonis/Core/HttpContext'

/**

 * Auth middleware is meant to restrict un-authenticated access to a given route

 * or a group of routes.

 *

 * You must register this middleware inside `start/kernel.ts` file under the list

 * of named middleware.

 */

export default class AuthMiddleware {

  /**

   * The URL to redirect to when request is Unauthorized

   */

  protected redirectTo = '/login'

  /**

   * Authenticates the current HTTP request against a custom set of defined

   * guards.

   *

   * The authentication loop stops as soon as the user is authenticated using any

   * of the mentioned guards and that guard will be used by the rest of the code

   * during the current request.

   */

  protected async authenticate(auth: HttpContextContract['auth'], guards: (keyof GuardsList)[]) {

    /**

     * Hold reference to the guard last attempted within the for loop. We pass

     * the reference of the guard to the "AuthenticationException", so that

     * it can decide the correct response behavior based upon the guard

     * driver

     */

    let guardLastAttempted: string | undefined

    for (let guard of guards) {

      guardLastAttempted = guard

      if (await auth.use(guard).check()) {

        /**

         * Instruct auth to use the given guard as the default guard for

         * the rest of the request, since the user authenticated

         * succeeded here

         */

        auth.defaultGuard = guard

        return true

      }

    }

    /**

     * Unable to authenticate using any guard

     */

    throw new AuthenticationException(

      'Unauthorized access',

      'E_UNAUTHORIZED_ACCESS',

      guardLastAttempted,

      this.redirectTo,

    )

  }

  /**

   * Handle request

   */

  public async handle (

    { auth }: HttpContextContract,

    next: () => Promise<void>,

    customGuards: (keyof GuardsList)[]

  ) {

    /**

     * Uses the user defined guards or the default guard mentioned in

     * the config file

     */

    const guards = customGuards.length ? customGuards : [auth.name]

    await this.authenticate(auth, guards)

    await next()

  }

}