Function checkUser

api/server/passwordless.ts:89–119

(req: any, res, next)

  // middleware for /auth/send-token
  async function checkUser(req: any, res, next) {
    // logger.info('passwordless middleware: ' + req.body.user);

    // teamId is only truthy for invitation event
    // const teamId = req.get('x-async-teamId');

    const { isLoginEvent, user } = req.body;

    // if login or signup event, check if user exist in database
    if (isLoginEvent) {
      const existingUser = await User.findOne({ email: user }).setOptions({ lean: true });

      // if user does not exist, respond with error object
      if (!existingUser) {
        // logger.info('You do not have permission to use this Login page.');
        res.status(201).json({
          error:
            'You do not have permission to use this Login page. Only registered and invited users can use this Login page.',
        });
        return;
      }

      // if user exists - then no error, call next and exit function early
      // functions in JS always return (undefined by default)
      next();
      return;
    }

    // if Registration event, no checks are needed
    next();
  }

  server.post(
    '/auth/send-token',