fix: validates verify result

Real-Dev-Squad · Dec 20, 2023 · b2a6d7e · b2a6d7e
1 parent 19a9f80
commit b2a6d7e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/src/controllers/getMembersInServer.ts b/src/controllers/getMembersInServer.ts
@@ -5,6 +5,7 @@ import { env } from "../typeDefinitions/default.types";
 import JSONResponse from "../utils/JsonResponse";
 import { User } from "../typeDefinitions/user.types";
 import { getMembersInServer } from "../utils/getMembersInServer";
+import { verifyAuthToken } from "../utils/verifyAuthToken";
 
 export const getMembersInServerHandler = async (
   request: IRequest,
@@ -16,10 +17,7 @@ export const getMembersInServerHandler = async (
     return new JSONResponse(response.BAD_SIGNATURE);
   }
   try {
-    const authToken = authHeader.split(" ")[1];
-    await jwt.verify(authToken, env.RDS_SERVERLESS_PUBLIC_KEY, {
-      algorithm: "RS256",
-    });
+    await verifyAuthToken(authHeader, env);
 
     const users = (await getMembersInServer(env)) as User[];
 

diff --git a/src/utils/verifyAuthToken.ts b/src/utils/verifyAuthToken.ts
@@ -9,7 +9,10 @@ import jwt from "@tsndr/cloudflare-worker-jwt";
 
 export async function verifyAuthToken(authHeader: string, env: env) {
   const authToken = authHeader.split(" ")[1];
-  await jwt.verify(authToken, env.RDS_SERVERLESS_PUBLIC_KEY, {
+  const isValid = await jwt.verify(authToken, env.RDS_SERVERLESS_PUBLIC_KEY, {
     algorithm: "RS256",
   });
+  if (!isValid) {
+    throw new Error("Invalid Authentication token");
+  }
 }