6 files changed, 215 insertions, 39 deletions

diff --git a/app/Middleware/AllowGuestOnly.ts b/app/Middleware/AllowGuestOnly.ts
new file mode 100644
index 0000000..ee43571
--- /dev/null
+++ b/app/Middleware/AllowGuestOnly.ts
@@ -0,0 +1,56 @@
+import { GuardsList } from '@ioc:Adonis/Addons/Auth';
+import { HttpContextContract } from '@ioc:Adonis/Core/HttpContext';
+import { AuthenticationException } from '@adonisjs/auth/build/standalone';
+
+/**
+ * This is actually a reverted a reverted auth middleware available in ./Auth.ts
+ * provided by the AdonisJS project iself.
+ */
+export default class GuestMiddleware {
+  /**
+   * The URL to redirect to when request is authorized
+   */
+  protected redirectTo = '/dashboard';
+
+  protected async authenticate(
+    auth: HttpContextContract['auth'],
+    guards: (keyof GuardsList)[],
+  ) {
+    let guardLastAttempted: string | undefined;
+
+    for (const guard of guards) {
+      guardLastAttempted = guard;
+
+      // eslint-disable-next-line no-await-in-loop
+      if (await auth.use(guard).check()) {
+        auth.defaultGuard = guard;
+
+        throw new AuthenticationException(
+          'Unauthorized access',
+          'E_UNAUTHORIZED_ACCESS',
+          guardLastAttempted,
+          this.redirectTo,
+        );
+      }
+    }
+  }
+
+  /**
+   * Handle request
+   */
+  public async handle(
+    { auth }: HttpContextContract,
+    next: () => Promise<void>,
+    customGuards: (keyof GuardsList)[],
+  ) {
+    /**
+     * Uses the user defined guards or the default guard mentioned in
+     * the config file
+     */
+    const guards = customGuards.length > 0 ? customGuards : [auth.name];
+
+    await this.authenticate(auth, guards);
+
+    await next();
+  }
+}
diff --git a/app/Middleware/Auth.ts b/app/Middleware/Auth.ts
new file mode 100644
index 0000000..d0b212c
--- /dev/null
+++ b/app/Middleware/Auth.ts
@@ -0,0 +1,118 @@
+import { GuardsList } from '@ioc:Adonis/Addons/Auth';
+import { HttpContextContract } from '@ioc:Adonis/Core/HttpContext';
+import { AuthenticationException } from '@adonisjs/auth/build/standalone';
+import * as jose from 'jose';
+import { appKey } from 'Config/app';
+import User from 'App/Models/User';
+
+/**
+ * Auth middleware is meant to restrict un-authenticated access to a given route
+ * or a group of routes.
+ *
+ * You must register this middleware inside `start/kernel.ts` file under the list
+ * of named middleware.
+ */
+export default class AuthMiddleware {
+  /**
+   * The URL to redirect to when request is Unauthorized
+   */
+  protected redirectTo = '/user/login';
+
+  /**
+   * Authenticates the current HTTP request against a custom set of defined
+   * guards.
+   *
+   * The authentication loop stops as soon as the user is authenticated using any
+   * of the mentioned guards and that guard will be used by the rest of the code
+   * during the current request.
+   */
+  protected async authenticate(
+    auth: HttpContextContract['auth'],
+    guards: (keyof GuardsList)[],
+    request: HttpContextContract['request'],
+  ) {
+    /**
+     * Hold reference to the guard last attempted within the for loop. We pass
+     * the reference of the guard to the "AuthenticationException", so that
+     * it can decide the correct response behavior based upon the guard
+     * driver
+     */
+    let guardLastAttempted: string | undefined;
+
+    for (const guard of guards) {
+      guardLastAttempted = guard;
+
+      let isLoggedIn = false;
+      try {
+        // eslint-disable-next-line no-await-in-loop
+        isLoggedIn = await auth.use(guard).check();
+      } catch {
+        // Silent fail to allow the rest of the code to handle the error
+      }
+
+      if (isLoggedIn) {
+        /**
+         * Instruct auth to use the given guard as the default guard for
+         * the rest of the request, since the user authenticated
+         * succeeded here
+         */
+        auth.defaultGuard = guard;
+        return;
+      }
+    }
+
+    // Manually try authenticating using the JWT (verfiy signature required)
+    // Legacy support for JWTs so that the client still works (older than 2.0.0)
+    const authToken = request.headers().authorization?.split(' ')[1];
+    if (authToken) {
+      try {
+        const jwt = await jose.jwtVerify(
+          authToken,
+          new TextEncoder().encode(appKey),
+        );
+        const { uid } = jwt.payload;
+
+        // @ts-expect-error
+        request.user = await User.findOrFail(uid);
+        return;
+      } catch {
+        // Silent fail to allow the rest of the code to handle the error
+      }
+    }
+
+    /**
+     * Unable to authenticate using any guard
+     */
+    throw new AuthenticationException(
+      'Unauthorized access',
+      'E_UNAUTHORIZED_ACCESS',
+      guardLastAttempted,
+      this.redirectTo,
+    );
+  }
+
+  /**
+   * Handle request
+   */
+  public async handle(
+    { request, auth, response }: HttpContextContract,
+    next: () => Promise<void>,
+    customGuards: (keyof GuardsList)[],
+  ) {
+    /**
+     * Uses the user defined guards or the default guard mentioned in
+     * the config file
+     */
+    const guards = customGuards.length > 0 ? customGuards : [auth.name];
+    try {
+      await this.authenticate(auth, guards, request);
+    } catch (error) {
+      // If the user is not authenticated and it is a web endpoint, redirect to the login page
+      if (guards.includes('web')) {
+        return response.redirect(error.redirectTo);
+      }
+      throw error;
+    }
+    await next();
+  }
+}
diff --git a/app/Middleware/ConvertEmptyStringsToNull.js b/app/Middleware/ConvertEmptyStringsToNull.js
deleted file mode 100644
index af6379a..0000000
--- a/app/Middleware/ConvertEmptyStringsToNull.js
+++ /dev/null
@@ -1,15 +0,0 @@
-class ConvertEmptyStringsToNull {
-  async handle({ request }, next) {
-    if (Object.keys(request.body).length) {
-      request.body = Object.assign(
-        ...Object.keys(request.body).map((key) => ({
-          [key]: request.body[key] !== '' ? request.body[key] : null,
-        })),
-      );
-    }
-
-    await next();
-  }
-}
-
-module.exports = ConvertEmptyStringsToNull;
diff --git a/app/Middleware/Dashboard.ts b/app/Middleware/Dashboard.ts
new file mode 100644
index 0000000..62deea0
--- /dev/null
+++ b/app/Middleware/Dashboard.ts
@@ -0,0 +1,17 @@
+import type { HttpContextContract } from '@ioc:Adonis/Core/HttpContext';
+import Config from '@ioc:Adonis/Core/Config';
+
+export default class Dashboard {
+  public async handle(
+    { response }: HttpContextContract,
+    next: () => Promise<void>,
+  ) {
+    if (Config.get('dashboard.enabled') === false) {
+      response.send(
+        'The user dashboard is disabled on this server\n\nIf you are the server owner, please set IS_DASHBOARD_ENABLED to true to enable the dashboard.',
+      );
+    } else {
+      await next();
+    }
+  }
+}
diff --git a/app/Middleware/HandleDoubleSlash.js b/app/Middleware/HandleDoubleSlash.js
deleted file mode 100644
index c4bc053..0000000
--- a/app/Middleware/HandleDoubleSlash.js
+++ /dev/null
@@ -1,24 +0,0 @@
-/** @typedef {import('@adonisjs/framework/src/Request')} Request */
-/** @typedef {import('@adonisjs/framework/src/Response')} Response */
-/** @typedef {import('@adonisjs/framework/src/View')} View */
-
-class HandleDoubleSlash {
-  /**
-   * @param {object} ctx
-   * @param {Request} ctx.request
-   * @param {Function} next
-   */
-  // eslint-disable-next-line consistent-return
-  async handle({ request, response }, next) {
-    // Redirect requests that contain duplicate slashes to the right path
-    if (request.url().includes('//')) {
-      return response.redirect(
-        request.url().replace(/\/{2,}/g, '/'),
-      );
-    }
-
-    await next();
-  }
-}
-
-module.exports = HandleDoubleSlash;
diff --git a/app/Middleware/SilentAuth.ts b/app/Middleware/SilentAuth.ts
new file mode 100644
index 0000000..ee73ec4
--- /dev/null
+++ b/app/Middleware/SilentAuth.ts
@@ -0,0 +1,24 @@
+import { HttpContextContract } from '@ioc:Adonis/Core/HttpContext';
+
+/**
+ * Silent auth middleware can be used as a global middleware to silent check
+ * if the user is logged-in or not.
+ *
+ * The request continues as usual, even when the user is not logged-in.
+ */
+export default class SilentAuthMiddleware {
+  /**
+   * Handle request
+   */
+  public async handle(
+    { auth }: HttpContextContract,
+    next: () => Promise<void>,
+  ) {
+    /**
+     * Check if user is logged-in or not. If yes, then `ctx.auth.user` will be
+     * set to the instance of the currently logged in user.
+     */
+    await auth.check();
+    await next();
+  }
+}