kleros/kleros-v2

import * as jwt from "jose";

export const authMiddleware = () => {
  return {
    before: async (request) => {
      const { event } = request;

      const authToken = event?.headers?.["x-auth-token"];
      if (!authToken) {
        return {
          statusCode: 400,
          body: JSON.stringify({ message: `Error : Missing x-auth-token in Header}` }),
        };
      }

      try {
        const issuer = process.env.JWT_ISSUER ?? "Kleros"; // ex :- Kleros
        const audience = process.env.JWT_AUDIENCE ?? "Court"; // ex :- Court, Curate, Escrow
        const secret = process.env.JWT_SECRET;

        if (!secret) {
          throw new Error("Secret not set in environment");
        }

        const encodedSecret = new TextEncoder().encode(secret);

        const { payload } = await jwt.jwtVerify(authToken, encodedSecret, { issuer, audience });

        // add auth details to event
        request.event.auth = payload;
      } catch (err) {
        return {
          statusCode: 401,
          body: JSON.stringify({ message: `Error : ${err?.message ?? "Not Authorised"}` }),
        };
      }
    },
  };
};