resolved error handling issue with requireAuth middleware

backend/src/index.ts

@@ -166,7 +166,6 @@ const main = async () => {
     );
   });
 
-  // await createTestUserForDevelopment();
   setUpHealthEndpoint(server);
 
   server.on("close", async () => {

backend/src/middleware/requireAuth.ts

@@ -42,58 +42,61 @@ const requireAuth = ({
 	acceptedAuthModes: string[];
 }) => {
 	return async (req: Request, res: Response, next: NextFunction) => {
-		
+
 		// validate auth token against accepted auth modes [acceptedAuthModes]
 		// and return token type [authTokenType] and value [authTokenValue]
-		
+		try {
-		const { authMode, authTokenValue } = validateAuthMode({
+			const { authMode, authTokenValue } = validateAuthMode({
-			headers: req.headers,
+				headers: req.headers,
-			acceptedAuthModes
+				acceptedAuthModes
-		});
+			});
 
-		let authPayload: IUser | IServiceAccount | IServiceTokenData;
+			let authPayload: IUser | IServiceAccount | IServiceTokenData;
-		switch (authMode) {
+			switch (authMode) {
-			case AUTH_MODE_SERVICE_ACCOUNT:
+				case AUTH_MODE_SERVICE_ACCOUNT:
-				authPayload = await getAuthSAAKPayload({
+					authPayload = await getAuthSAAKPayload({
-					authTokenValue
+						authTokenValue
-				});
+					});
-				req.serviceAccount = authPayload;
+					req.serviceAccount = authPayload;
-				break;
+					break;
-			case AUTH_MODE_SERVICE_TOKEN:
+				case AUTH_MODE_SERVICE_TOKEN:
-				authPayload = await getAuthSTDPayload({
+					authPayload = await getAuthSTDPayload({
-					authTokenValue
+						authTokenValue
-				});
+					});
-				req.serviceTokenData = authPayload;
+					req.serviceTokenData = authPayload;
-				break;
+					break;
-			case AUTH_MODE_API_KEY:
+				case AUTH_MODE_API_KEY:
-				authPayload = await getAuthAPIKeyPayload({
+					authPayload = await getAuthAPIKeyPayload({
-					authTokenValue
+						authTokenValue
-				});
+					});
-				req.user = authPayload;
+					req.user = authPayload;
-				break;
+					break;
-			default:
+				default:
-				authPayload = await getAuthUserPayload({
+					authPayload = await getAuthUserPayload({
-					authTokenValue
+						authTokenValue
-				});
+					});
-				req.user = authPayload;
+					req.user = authPayload;
-				break;
+					break;
+			}
+
+			req.requestData = {
+				...req.params,
+				...req.query,
+				...req.body,
+			}
+
+			req.authData = {
+				authMode,
+				authPayload, // User, ServiceAccount, ServiceTokenData
+				authChannel: getChannelFromUserAgent(req.headers['user-agent']),
+				authIP: req.ip,
+				authUserAgent: req.headers['user-agent'] ?? 'other'
+			}
+
+			return next();
+		} catch (err) {
+			return next(err);
 		}
-		
-		req.requestData = {
-			...req.params,
-			...req.query,
-			...req.body,
-		}
-		
-		req.authData = {
-			authMode,
-			authPayload, // User, ServiceAccount, ServiceTokenData
-			authChannel: getChannelFromUserAgent(req.headers['user-agent']),
-			authIP: req.ip,
-			authUserAgent: req.headers['user-agent'] ?? 'other'
-		}
-		
-		return next();
 	}
 }
 

backend/src/utils/setup/index.ts

@@ -9,21 +9,22 @@ const { patchRouterParam } = require('../patchAsyncRoutes');
 import {
     validateEncryptionKeysConfig
 } from './validateConfig';
-import { 
+import {
-    backfillSecretVersions, 
+    backfillSecretVersions,
     backfillBots,
-    backfillSecretBlindIndexData, 
+    backfillSecretBlindIndexData,
     backfillEncryptionMetadata
 } from './backfillData';
 import {
     reencryptBotPrivateKeys,
     reencryptSecretBlindIndexDataSalts
 } from './reencryptData';
-import { 
+import {
     getNodeEnv,
     getMongoURL,
     getSentryDSN
 } from '../../config';
+import { initializePassport } from '../auth';
 
 /**
  * Prepare Infisical upon startup. This includes tasks like:
@@ -42,13 +43,14 @@ export const setup = async () => {
 
     // initializing SMTP configuration
     setTransporter(await initSmtp());
-    
+
     // initializing global feature set
     await EELicenseService.initGlobalFeatureSet();
-    
+
     // initializing the database connection
     await DatabaseService.initDatabase(await getMongoURL());
-    
+    await initializePassport();
+
     /**
      * NOTE: the order in this setup function is critical.
      * It is important to backfill data before performing any re-encryption functionality.
@@ -59,7 +61,7 @@ export const setup = async () => {
     await backfillBots();
     await backfillSecretBlindIndexData();
     await backfillEncryptionMetadata();
-    
+
     // re-encrypt any data previously encrypted under server hex 128-bit ENCRYPTION_KEY
     // to base64 256-bit ROOT_ENCRYPTION_KEY
     await reencryptBotPrivateKeys();