Function getIdToken

server/core/auth.ts:53–89

(req: Request)

const idTokenClients = new Map<string, IdTokenClient>();

export async function getIdToken(req: Request) {
  try {
    const idToken = req.headers.get("authorization")?.replace(/^Bearer /i, "");
    let result: DecodedIdToken | null = null;

    if (idToken) {
      const certificatesPromise = fetchCertificates();
      const audience = env.GOOGLE_CLOUD_PROJECT;
      let idTokenClient = idTokenClients.get(audience);

      if (!idTokenClient) {
        idTokenClient = await auth.getIdTokenClient(audience);
        idTokenClients.set(audience, idTokenClient);
      }

      const ticket = await idTokenClient.verifySignedJwtWithCertsAsync(
        idToken,
        await certificatesPromise,
        audience,
        [`https://securetoken.google.com/${env.GOOGLE_CLOUD_PROJECT}`],
      );

      const token = ticket.getPayload();

      if (token) {
        if ("user_id" in token) delete token.user_id;
        Object.assign(token, { uid: token.sub });
        result = token as DecodedIdToken;
      }
    }

    return result;
  } catch (err) {
    console.log(err);
    return null;
  }
}

// #region Types