Function isHttpRequestAuthenticated

src/node/orpc/server.ts:924–952

(req: express.Request)

  }

  async function isHttpRequestAuthenticated(req: express.Request): Promise<boolean> {
    if (!authToken?.trim()) {
      return true;
    }

    const expectedToken = authToken.trim();
    const presentedToken = extractBearerToken(req.header("authorization"));
    if (presentedToken && safeEq(presentedToken, expectedToken)) {
      return true;
    }

    const sessionTokens = extractCookieValues(req.headers.cookie, SERVER_AUTH_SESSION_COOKIE_NAME);
    if (sessionTokens.length === 0) {
      return false;
    }

    for (const sessionToken of sessionTokens) {
      const validation = await context.serverAuthService.validateSessionToken(sessionToken, {
        userAgent: req.header("user-agent") ?? undefined,
        ipAddress: getRequestIpAddress(req),
      });

      if (validation != null) {
        return true;
      }
    }

    return false;
  }

  function getStringParamFromQueryOrBody(req: express.Request, key: string): string | null {
    const queryValue = req.query[key];