[#94] Backend

https://project.mdnd-it.cc/work_packages/94

SerpentRace_Backend/src/Application/Services/AuthMiddleware.ts

@@ -0,0 +1,57 @@
+import { Request, Response, NextFunction } from 'express';
+import { JWTService } from './JWTService';
+import { logAuth, logWarning } from './Logger';
+
+export const jwtService = new JWTService();
+
+export function authRequired(req: Request, res: Response, next: NextFunction) {
+    const payload = jwtService.verify(req);
+    if (!payload) {
+        logAuth('Authentication failed - No valid token', undefined, {
+            ip: req.ip,
+            userAgent: req.get ? req.get('User-Agent') : 'unknown',
+            path: req.path
+        }, req);
+        return res.status(401).json({ error: 'Unauthorized' });
+    }
+    
+    logAuth('Authentication successful', payload.userId, {
+        authLevel: payload.authLevel,
+        orgId: payload.orgId
+    }, req);
+    
+    const refreshed = jwtService.refreshIfNeeded(payload, res);
+    if (refreshed) {
+        logAuth('Token refreshed', payload.userId, undefined, req);
+    }
+    
+    (req as any).user = payload;
+    next();
+}
+
+export function adminRequired(req: Request, res: Response, next: NextFunction) {
+    const payload = jwtService.verify(req);
+    if (!payload || payload.authLevel !== 1) {
+        logWarning('Admin access denied', {
+            hasPayload: !!payload,
+            authLevel: payload?.authLevel,
+            userId: payload?.userId,
+            ip: req.ip,
+            path: req.path
+        }, req);
+        return res.status(403).json({ error: 'Forbidden' });
+    }
+    
+    logAuth('Admin authentication successful', payload.userId, {
+        authLevel: payload.authLevel,
+        orgId: payload.orgId
+    }, req);
+    
+    const refreshed = jwtService.refreshIfNeeded(payload, res);
+    if (refreshed) {
+        logAuth('Admin token refreshed', payload.userId, undefined, req);
+    }
+    
+    (req as any).user = payload;
+    next();
+}