Allow using cookies to authenticate

package.json

@@ -22,6 +22,7 @@
     "@babel/preset-env": "^7.23.2",
     "@sendgrid/mail": "^7.7.0",
     "axios": "^1.6.2",
+    "cookie-parser": "^1.4.6",
     "dotenv": "^16.3.1",
     "express": "^4.18.2",
     "express-async-handler": "^1.2.0",

src/app.js

@@ -3,10 +3,14 @@ import "./config/startup"
 
 import Express, { json } from "express"
 import sequelize from "./database/database"
+import cookieParser from "cookie-parser"
 
 const app = Express()
 const PORT = process.env.PORT || 3000
 
+app.use(json())
+app.use(cookieParser())
+
 import baseRoutes from "./routes/base"
 import paymentRoutes from "./routes/payment"
 import cardRoutes from "./routes/card"
@@ -18,8 +22,6 @@ import statusRoutes from "./routes/status"
 import cronRoutes from "./routes/cron"
 import logRoutes from "./routes/log"
 
-app.use(json()) // middleware to parse json data
-
 app.use("/", baseRoutes)
 app.use("/payment", paymentRoutes)
 app.use("/card", cardRoutes)

src/middleware/digestMiddleware.js

@@ -0,0 +1,9 @@
+import { v4 as uuid } from "uuid"
+
+export default function digest(req, res, next) {
+  // adds unique id to each request
+  // used for logging to track the request
+  req.id = uuid()
+
+  next()
+}

src/utils/getUser.js

@@ -1,7 +1,7 @@
 import fetch from "node-fetch"
 
 export default async function getUser(req, user_id, options) {
-  const api_token = req.headers["x-api-token"]
+  const api_token = req.headers["x-api-token"] || req?.cookies?._api_token
   const { allowSelf = false } = options || {}
 
   try {

src/utils/log.js

@@ -0,0 +1,4 @@
+// custom log function
+// auto includes the user_id and request id
+
+export default function log(req, message, data) {}