Release v2.2.0

src/web/middleware.js

@@ -0,0 +1,38 @@
+// Shared web middleware for auth, media, and upload handling.
+
+const express = require('express');
+const fs = require('fs');
+
+module.exports = function registerMiddleware(app, deps) {
+  const pool = deps.pool;
+  const loadCurrentUser = deps.loadCurrentUser;
+  const requireAuth = deps.requireAuth;
+  const mediaDir = deps.MEDIA_DIR;
+  const uploadsDir = deps.UPLOADS_DIR;
+  const thumbnailsDir = deps.THUMBNAILS_DIR;
+  const assetDir = deps.ASSET_DIR;
+
+  app.use(express.urlencoded({ extended: true }));
+  app.use(express.json());
+  app.use('/assets', express.static(assetDir));
+  app.use('/media', express.static(mediaDir));
+  fs.mkdirSync(uploadsDir, { recursive: true });
+  fs.mkdirSync(thumbnailsDir, { recursive: true });
+
+  app.use(async function (req, _res, next) {
+    try {
+      req.currentUser = await loadCurrentUser(pool, req);
+      next();
+    } catch (error) {
+      next(error);
+    }
+  });
+
+  app.use(function (req, res, next) {
+    if (req.path === '/' || req.path === '/login' || req.path === '/logout' || req.path.indexOf('/api/internal/slide-thumbnails/') === 0) {
+      return next();
+    }
+
+    return requireAuth(req, res, next);
+  });
+};