infisical/backend/src/middleware/requireBotAuth.ts

import { NextFunction, Request, Response } from "express";
import { Types } from "mongoose";
import { validateClientForBot } from "../validation";

type req = "params" | "body" | "query";

const requireBotAuth = ({
    acceptedRoles,
    locationBotId = "params",
}: {
    acceptedRoles: Array<"admin" | "member">;
    locationBotId?: req;
}) => {
    return async (req: Request, res: Response, next: NextFunction) => {
        const { botId } = req[locationBotId];
        
        req.bot = await validateClientForBot({
            authData: req.authData,
            botId: new Types.ObjectId(botId),
            acceptedRoles,
        });
        
        next();
    }
}

export default requireBotAuth;