OwlCyberSecurity - MANAGER

Edit File: buildAuthenticatedRouter.js

import { Router as AdminRouter } from "adminjs";
import express from "express";
import formidableMiddleware from "express-formidable";
import session from "express-session";
import { withLogin } from "./authentication/login.handler.js";
import { withLogout } from "./authentication/logout.handler.js";
import { withProtectedRoutesHandler } from "./authentication/protected-routes.handler.js";
import { buildAssets, buildRoutes, initializeAdmin } from "./buildRouter.js";
import { INVALID_AUTH_CONFIG_ERROR, MISSING_AUTH_CONFIG_ERROR, OldBodyParserUsedError, WrongArgumentError, } from "./errors.js";
import { withRefresh } from "./authentication/refresh.handler.js";
/**
 * @typedef {Function} Authenticate
 * @memberof module:@adminjs/express
 * @description
 * function taking 2 arguments email and password
 * @param {string} [email]         email given in the form
 * @param {string} [password]      password given in the form
 * @return {CurrentAdmin | null}      returns current admin or null
 */
/**
 * Builds the Express Router which is protected by a session auth
 *
 * Using the router requires you to install `express-session` as a
 * dependency. Normally express-session holds session in memory, which is
 * not optimized for production usage and, in development, it causes
 * logging out after every page refresh (if you use nodemon).
 * @static
 * @memberof module:@adminjs/express
 * @example
 * const ADMIN = {
 *   email: 'test@example.com',
 *   password: 'password',
 * }
 *
 * AdminJSExpress.buildAuthenticatedRouter(adminJs, {
 *   authenticate: async (email, password) => {
 *     if (ADMIN.password === password && ADMIN.email === email) {
 *       return ADMIN
 *     }
 *     return null
 *   },
 *   cookieName: 'adminjs',
 *   cookiePassword: 'somePassword',
 * }, [router])
 */
export const buildAuthenticatedRouter = (admin, auth, predefinedRouter, sessionOptions, formidableOptions) => {
    initializeAdmin(admin);
    const { routes, assets } = AdminRouter;
    const router = predefinedRouter || express.Router();
    if (!auth.authenticate && !auth.provider) {
        throw new WrongArgumentError(MISSING_AUTH_CONFIG_ERROR);
    }
    if (auth.authenticate && auth.provider) {
        throw new WrongArgumentError(INVALID_AUTH_CONFIG_ERROR);
    }
    if (auth.provider) {
        admin.options.env = Object.assign(Object.assign({}, admin.options.env), auth.provider.getUiProps());
    }
    router.use((req, _, next) => {
        if (req._body) {
            next(new OldBodyParserUsedError());
        }
        next();
    });
    // todo fix types
    router.use(session(Object.assign(Object.assign({}, sessionOptions), { secret: auth.cookiePassword, name: auth.cookieName || "adminjs" })));
    router.use(formidableMiddleware(formidableOptions));
    withLogin(router, admin, auth);
    withLogout(router, admin, auth);
    buildAssets({ admin, assets, routes, router });
    withProtectedRoutesHandler(router, admin);
    withRefresh(router, admin, auth);
    buildRoutes({ admin, routes, router });
    return router;
};