Function getDataFromAuthorizationHeader

lib/auth.ts:100–129

(authorizationHeader: string)

}

async function getDataFromAuthorizationHeader(authorizationHeader: string) {
  if (!authorizationHeader) {
    return null;
  }

  // Only basic auth is supported for now
  if (!authorizationHeader.startsWith('Basic ')) {
    return null;
  }

  try {
    const basicAuthHash = authorizationHeader.split('Basic ')[1] || '';

    const [basicAuthUsername, basicAuthPassword] = dataToText(decodeBase64(basicAuthHash)).split(':');

    const hashedPassword = await generateHash(`${basicAuthPassword}:${PASSWORD_SALT}`, 'SHA-256');

    const user = await UserModel.getByEmail(basicAuthUsername);

    if (!user || (user.hashed_password !== hashedPassword && user.extra.dav_hashed_password !== hashedPassword)) {
      throw new Error('Email not found or invalid password.');
    }

    return { user, session: undefined };
  } catch (error) {
    console.error(error);
  }

  return null;
}

async function getDataFromCookie(
  cookieValue: string,