在Express.js中使用Firebase作为身份验证中间件

Question

我目前正在创建一个身份验证中间件，以确保在请求标头中有一个有效的firebase令牌。代码如下：

身份验证

import * as firebase from 'firebase-admin';
import { NextFunction, Request, Response } from 'express';
const getAuthToken = (req: Request, res: Response, next: NextFunction) => {
if (req.headers.authorization && req.headers.authorization.split(' ')[0] === 'Bearer') {
req.authToken = req.headers.authorization.split(' ')[1];
} else {
req.authToken = null;
}
next();
};
export const checkIfAuthenticated = (req: Request, res: Response, next: NextFunction) => {
getAuthToken(req, res, async () => {
try {
const { authToken } = req;
const userInfo = await firebase.auth().verifyIdToken(authToken);
req.authId = userInfo.uid;
return next();
} catch (e) {
return res.status(401).send({ error: 'You are not authorized to make this request' });
}
});
};
export const checkIfAdmin = (req: Request, res: Response, next: NextFunction) => {
getAuthToken(req, res, async () => {
try {
const authToken = req;
const userInfo = await firebase.auth().verifyIdToken(authToken);
if (userInfo.admin === true) {
req.authId = userInfo.uid;
return next();
}
} catch (e) {
return res.status(401).send({ error: 'You are not authorized to make this request' });
}
});
};

app.ts

app.get('/api/users', checkIfAuthenticated, (req, res) => {
executeQuery('SELECT * from user')
.then(function (results: unknown) {
res.send(results);
})
.catch(function (err: unknown) {
res.status(400).send(err);
});
});

然而，在auth.ts中，我不断收到以下错误，我该如何修复它们：

1.在getAuthToken中

错误：(6，9(TS2339:类型"Request<ParamsDictionary、any、any、ParsedQs>'。

错误：(8，9(TS2339:类型"Request<ParamsDictionary、any、any、ParsedQs>'。

2.检查中IfAuthenticated

错误：(16，15(TS2339:类型"Request<ParamsDictionary、any、any、ParsedQs>'。

错误：(18，11(TS2339:类型"Request<ParamsDictionary、any、any、ParsedQs>'。

3.检查中IfAdmin

错误：(30，60(TS2345:类型为"Request<参数Dictionary，any，any，ParsedQs>'不可分配给"string"类型的参数。

错误：(32，13(TS2339:类型"Request<ParamsDictionary、any、any、ParsedQs>'。

Answer 1

修复如下：

import * as firebase from 'firebase-admin';
import { NextFunction, Request, Response } from 'express';
export interface IGetAuthTokenRequest extends Request {
authToken: string;
authId: string;
}
const getAuthToken = (req: IGetAuthTokenRequest, res: Response, next: NextFunction) => {
if (req.headers.authorization && req.headers.authorization.split(' ')[0] === 'Bearer') {
req.authToken = req.headers.authorization.split(' ')[1];
} else {
req.authToken = null;
}
next();
};
export const checkIfAuthenticated = (
req: IGetAuthTokenRequest,
res: Response,
next: NextFunction
) => {
getAuthToken(req, res, async () => {
try {
const { authToken } = req;
const userInfo = await firebase.auth().verifyIdToken(authToken);
req.authId = userInfo.uid;
return next();
} catch (e) {
return res.status(401).send({ error: 'You are not authorized to make this request' });
}
});
};
export const checkIfAdmin = (req: IGetAuthTokenRequest, res: Response, next: NextFunction) => {
getAuthToken(req, res, async () => {
try {
const userInfo = await firebase.auth().verifyIdToken(req.authToken);
if (userInfo.admin === true) {
req.authId = userInfo.uid;
return next();
}
} catch (e) {
return res.status(401).send({ error: 'You are not authorized to make this request' });
}
});