Function forwardAuthRequest

frontend/server.js:206–409

(req, res, targetUrl)

}

function forwardAuthRequest(req, res, targetUrl) {
  const parsedTarget = new URL(targetUrl);
  const transport = parsedTarget.protocol === "https:" ? https : http;
  const cookies = parseCookies(req);

  if (
    req.parsedPathname === "/api/user/refresh_token" &&
    !cookies[COOKIE_NAMES.REFRESH_TOKEN]
  ) {
    res.writeHead(204);
    res.end();
    return;
  }

  collectRequestBody(req)
    .then((rawBody) => {
      const body = prepareAuthRequestBody(req.parsedPathname, rawBody, cookies, res);

    // If body is null, prepareAuthRequestBody already sent the error response
    if (body === null) {
      return;
    }

      const forwardHeaders = { ...req.headers, host: parsedTarget.host };

      // Inject access_token from cookie as Authorization header for the backend
      if (
        cookies[COOKIE_NAMES.ACCESS_TOKEN] &&
        !forwardHeaders["authorization"]
      ) {
        forwardHeaders["authorization"] =
          `Bearer ${cookies[COOKIE_NAMES.ACCESS_TOKEN]}`;
      }

      if (
        cookies[COOKIE_NAMES.OAUTH_PENDING] &&
        (req.parsedPathname === "/api/user/oauth/pending" ||
          req.parsedPathname === "/api/user/oauth/complete")
      ) {
        forwardHeaders["x-oauth-pending-token"] =
          cookies[COOKIE_NAMES.OAUTH_PENDING];
      }

      // Update content-length if body was modified
      if (body.length !== rawBody.length) {
        forwardHeaders["content-length"] = String(body.length);
      }

      const options = {
        hostname: parsedTarget.hostname,
        port: parsedTarget.port,
        path: req.url,
        method: req.method,
        headers: forwardHeaders,
      };

      const proxyReq = transport.request(options, (proxyRes) => {
        const responseChunks = [];