Prepare authentication middleware

Author: Reimar75

.env

@@ -1 +1,2 @@
-APP_VERSION=dev-local
+APP_VERSION=dev-local
+AUTH_PROVIDERS=credentials,keycloak,livekit

middleware/auth.js

@@ -0,0 +1,21 @@
+import "dotenv/config";
+
+export function authMiddleware(socket, next) {
+    const token = socket.handshake.query.appToken;
+    const provider = socket.handshake.query.provider;
+
+    if (!token || !provider) {
+        // return next(new Error("Unauthorized"));
+    }
+
+    if ("credentials" === provider) {
+        return next();
+    } else if ("keycloak" === provider) {
+        return next();
+    } else if ("livekit" === provider) {
+        return next();
+    }
+
+    return next();
+    // next(new Error("Unauthorized"));
+}

package.json

@@ -2,6 +2,7 @@
   "name": "secure-document-share",
   "version": "1.0.0",
   "description": "This package creates a service to share pdfs which are converted to images and then shared via a link so it is like a share slideshow",
+  "type": "module",
   "main": "server.js",
   "scripts": {
     "start": "node server.mjs",

server.mjs

@@ -6,6 +6,7 @@ import fs from "fs/promises";
 import { Server } from "socket.io";
 import cors from "cors";
 import "dotenv/config";
+import { authMiddleware } from "./middleware/auth.js";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -16,6 +17,7 @@ const argPort = process.argv.find(arg => arg.startsWith("--port="));
 const PORT = argPort ? parseInt(argPort.split("=")[1], 10) : (process.env.PORT || DEFAULT_PORT);
 const version = process.env.APP_VERSION || "not_set";
 const slideshows = new Map();
+const channels = new Map();
 const MAX_CONCURRENT_WRITES = 5;
 let activeWrites = 0;
 const uploadQueue = [];
@@ -64,7 +66,6 @@ app.get("/download/:docId", async (req, res) => {
 
 const server = app.listen(PORT, () => console.log(`Server running at http://localhost:${PORT}`));
 const io = new Server(server, { maxHttpBufferSize: 1e8, pingTimeout: 60000 });
-const channels = new Map();
 
 async function processUploadQueue() {
     if (activeWrites >= MAX_CONCURRENT_WRITES || uploadQueue.length === 0) return;
@@ -101,6 +102,8 @@ function handleJoin(socket, docId) {
     console.log(`Client ${socket.id} joined channel ${docId}`);
 }
 
+io.use(authMiddleware);
+
 io.on("connection", (socket) => {
     console.log(`Client ${socket.id} connected!`);
     const channelName = socket.handshake.query.channel ?? "default";