first commit

admin-server/middleware/checkAuth.js

@@ -0,0 +1,7 @@
+module.exports = (req, res, next) => {
+  if (req.session && req.session.isAuthenticated) {
+    next();
+  } else {
+    res.status(401).json({ message: 'Unauthorized' });
+  }
+};

admin-server/middleware/csrf.js

@@ -0,0 +1,17 @@
+// middleware/csrf.js
+const csurf = require('csurf');
+
+const csrfProtection = csurf({ cookie: false });
+
+const csrfMiddleware = (req, res, next) => {
+  if (
+    req.path === '/login' ||
+    req.path === '/moders/moder-login' ||
+    req.path === '/moders/csrf-token'
+  ) {
+    return next();
+  }
+  return csrfProtection(req, res, next);
+};
+
+module.exports = csrfMiddleware;

admin-server/middleware/errorHandler.js

@@ -0,0 +1,8 @@
+const logger = require('../logger')
+module.exports = (err, req, res, next) => {
+  if (err.code === 'EBADCSRFTOKEN') {
+    return res.status(403).json({ message: 'Invalid CSRF token' });
+  }
+  logger.error(err.stack);
+  res.status(500).json({ message: 'Internal Server Error' });
+};