Moved api into it's own folder

api/src/middleware/authentication.ts

@@ -0,0 +1,25 @@
+import { Request } from 'express';
+
+import { verifyToken } from 'utils/authToken';
+import { findEntityOrThrow } from 'utils/typeorm';
+import { catchErrors, InvalidTokenError } from 'errors';
+import { User } from 'entities';
+
+const getAuthTokenFromRequest = (req: Request): string | null => {
+  const header = req.get('Authorization') || '';
+  const [bearer, token] = header.split(' ');
+  return bearer === 'Bearer' && token ? token : null;
+};
+
+export const authenticateUser = catchErrors(async (req, _res, next) => {
+  const token = getAuthTokenFromRequest(req);
+  if (!token) {
+    throw new InvalidTokenError('Authentication token not found.');
+  }
+  const userId = verifyToken(token).sub;
+  if (!userId) {
+    throw new InvalidTokenError('Authentication token is invalid.');
+  }
+  req.currentUser = await findEntityOrThrow(User, userId);
+  next();
+});