node.js - 在 Express.js 中使用 Firebase 作為認證中介軟體

我目前正在創建一個認證中介軟體，以確保請求標頭中有有效的 Firebase 令牌。代碼如下：

auth.ts

import * as firebase from 'firebase-admin';
import { NextFunction, Request, Response } from 'express';

const getAuthToken = (req: Request, res: Response, next: NextFunction) => {
  if (req.headers.authorization && req.headers.authorization.split(' ')[0] === 'Bearer') {
    req.authToken = req.headers.authorization.split(' ')[1];
  } else {
    req.authToken = null;
  }
  next();
};

export const checkIfAuthenticated = (req: Request, res: Response, next: NextFunction) => {
  getAuthToken(req, res, async () => {
    try {
      const { authToken } = req;
      const userInfo = await firebase.auth().verifyIdToken(authToken);
      req.authId = userInfo.uid;
      return next();
    } catch (e) {
      return res.status(401).send({ error: 'You are not authorized to make this request' });
    }
  });
};

export const checkIfAdmin = (req: Request, res: Response, next: NextFunction) => {
  getAuthToken(req, res, async () => {
    try {
      const authToken = req;
      const userInfo = await firebase.auth().verifyIdToken(authToken);
      if (userInfo.admin === true) {
        req.authId = userInfo.uid;
        return next();
      }
    } catch (e) {
      return res.status(401).send({ error: 'You are not authorized to make this request' });
    }
  });
};

app.ts

app.get('/api/users', checkIfAuthenticated, (req, res) => {
  executeQuery('SELECT * from user')
    .then(function (results: unknown) {
      res.send(results);
    })
    .catch(function (err: unknown) {
      res.status(400).send(err);
    });
});

但是，在 auth.ts 中我一直收到以下錯誤，我該如何修復它們：

1. 在 getAuthToken 中

錯誤:(6, 9) TS2339: 屬性 'authToken' 在類型 'Request' 上不存在。

錯誤:(8, 9) TS2339: 屬性 'authToken' 在類型 'Request' 上不存在。

2. 在 checkIfAuthenticated 中

錯誤:(16, 15) TS2339: 屬性 'authToken' 在類型 'Request' 上不存在。

錯誤:(18, 11) TS2339: 屬性 'authId' 在類型 'Request' 上不存在。

3. 在 checkIfAdmin 中

錯誤:(30, 60) TS2345: 類型 'Request' 的參數不能分配給類型 'string' 的參數。

錯誤:(32, 13) TS2339: 屬性 'authId' 在類型 'Request' 上不存在。

答案＃1

已將其修正如下：

import * as firebase from 'firebase-admin';
import { NextFunction, Request, Response } from 'express';

export interface IGetAuthTokenRequest extends Request {
  authToken: string;
  authId: string;
}

const getAuthToken = (req: IGetAuthTokenRequest, res: Response, next: NextFunction) => {
  if (req.headers.authorization && req.headers.authorization.split(' ')[0] === 'Bearer') {
    req.authToken = req.headers.authorization.split(' ')[1];
  } else {
    req.authToken = null;
  }
  next();
};

export const checkIfAuthenticated = (
  req: IGetAuthTokenRequest,
  res: Response,
  next: NextFunction
) => {
  getAuthToken(req, res, async () => {
    try {
      const { authToken } = req;
      const userInfo = await firebase.auth().verifyIdToken(authToken);
      req.authId = userInfo.uid;
      return next();
    } catch (e) {
      return res.status(401).send({ error: 'You are not authorized to make this request' });
    }
  });
};

export const checkIfAdmin = (req: IGetAuthTokenRequest, res: Response, next: NextFunction) => {
  getAuthToken(req, res, async () => {
    try {
      const userInfo = await firebase.auth().verifyIdToken(req.authToken);
      if (userInfo.admin === true) {
        req.authId = userInfo.uid;
        return next();
      }
    } catch (e) {
      return res.status(401).send({ error: 'You are not authorized to make this request' });
    }
  });

答案＃2

我在使用被接受的答案時遇到了一些錯誤，所以我根據之前的答案寫了一個快速修復：

import * as firebase from "firebase-admin";
import { NextFunction, Request, Response } from "express";

declare global {
  namespace Express {
    export interface Request {
      authToken?: string;
      authId?: string;
    }
  }
}

const getAuthToken = (req: Request, res: Response, next: NextFunction) => {
  if (
    req.headers.authorization &&
    req.headers.authorization.split(" ")[0] === "Bearer"
  ) {
    req.authToken = req.headers.authorization.split(" ")[1];
  } else {
    req.authToken = "";
  }
  next();
};

export const checkIfAuthenticated = (
  req: Request,
  res: Response,
  next: NextFunction
) => {
  getAuthToken(req, res, async () => {
    try {
      const { authToken } = req;
      if (!authToken) throw new Error("Unauthenticated!");

      const userInfo = await firebase.auth().verifyIdToken(authToken);
      req.authId = userInfo.uid;
      return next();
    } catch (e) {
      return res
        .status(401)
        .send({ error: "You are not authorized to make this request" });
    }
  });
};

export const checkIfAdmin = (req: Request, res: Response, next: NextFunction) => {
    getAuthToken(req, res, async () => {
      try {
        if (!req.authToken) throw new Error("Unauthenticated!");
        const userInfo = await firebase.auth().verifyIdToken(req.authToken);
        if (userInfo.admin === true) {
          req.authId = userInfo.uid;
          return next();
        }
      } catch (e) {
        return res.status(401).send({ error: 'You are not authorized to make this request' });
      }
    });