app.js

@@ -66,13 +66,12 @@ app.use(cors()); // Allow access from any origin
 app.use(express.json()); //JSON Parsing for POST Requests
 app.use(compression()); // Compress API Data if supported by client
 app.use(limiter);
-app.use(authenticate);
 
 // 2023 Rationalisation Routes (/api/v2, /misc)
-app.use('/api/v2/pis', pis2Rtr); // API Version 2
+app.use('/api/v2/pis', authenticate, pis2Rtr); // API Version 2
-app.use('/api/v2/live', live2Rtr); // API Version 2
+app.use('/api/v2/live',authenticate, live2Rtr); // API Version 2
 app.use('/api/v2/ref', ref2Rtr); // API Version 2
-app.use('/api/v2/timetable', tt2Rtr); // API Version 2
+app.use('/api/v2/timetable', authenticate, tt2Rtr); // API Version 2
 app.use('/api/v2/user', user2Rtr); // API Version 2
 app.use('/misc', miscRtr); // Non public-api endpoints (Stats, Issue, etc.)
 

src/configs/version.configs.js

@@ -1,6 +1,6 @@
 const version = {
   api: ['/api/v1/','/api/v2'],
-  app: '2023.7.3'
+  app: '2023.7.2'
 };
 
 module.exports = version;

src/controllers/ldb.controllers.js

@@ -12,11 +12,6 @@ async function get(req, res, next){ // API v1 only
 }
 
 async function getTrain(req, res, next) { // API v2 Only
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    throw err;
-  }
   let type = req.params.searchType;
   let id = req.params.id;
   try {
@@ -30,11 +25,12 @@ async function getTrain(req, res, next) { // API v2 Only
       res.json(await ldb.getServicesByOther(id));
       break;
     default:
-      res.status(400).json({status: 'error', message:'Invalid search type'});
+      res.status(404);
+      res.json({status: 'error', message:'Invalid search type'});
     }
   } catch (err) {
-    err.status = 500;
     console.error('Unknown Error', err.message);
+    err.status = 500;
     next(err);
   }
 }
@@ -44,14 +40,11 @@ async function getStation(req, res, next) { // API v2 Only
   let id = req.params.id;
   try {
     if (type == 'staff') {
-      if (!req.isAuthed) {
-        const err = new Error('Unauthorized');
-        err.status = 401;
-        throw err;
-      }
       res.json(await ldb.get(id, true));
+      next();
     } else {
       res.json(await ldb.get(id, false));
+      next();
     }
   } catch (err) {
     console.error('Unknown Error', err.message);

src/controllers/pis.controllers.js

@@ -1,11 +1,6 @@
 const pis = require('../services/pis.services');
 
 async function byOrigDest(req, res, next){
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    throw err;
-  }
   try {
     let start = req.params.start;
     let end = req.params.end;
@@ -18,48 +13,33 @@ async function byOrigDest(req, res, next){
 
 /* Used in /api/v2 */
 async function byStartEndCRS(req, res, next){
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    return next(err);
-  }
   try {
     let startCrs = req.params.startCrs;
     let endCrs = req.params.endCrs;
     res.json(await pis.findPisByOrigDest(startCrs,endCrs));
   } catch (err) {
     console.error('Unknown Error', err.message);
-    return next(err);
+    next(err);
   }
 }
 
 /* Used in /api/v2 */
 async function byCode(req, res, next){
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    return next(err);
-  }
   try {
     let code = req.params.code;
     res.json(await pis.findPisByCode(code));
   } catch (err) {
     console.error('Unknown Error', err.message);
-    return next(err);
+    next(err);
   }
 }
 
 async function random(req, res, next){
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    return next(err);
-  }
   try {
     res.json(await pis.findRandom());
   } catch (err) {
     console.error('Unknown Error', err.message);
-    return next(err);
+    next(err);
   }
 }
 

src/controllers/train.controllers.js

@@ -1,11 +1,6 @@
 const train = require('../services/trainService.services');
 
 async function getByHeadcodeToday(req, res, next){
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    throw err;
-  }
   try {
     var searchHeadcode = req.params.id;
     res.json(await train.findByHeadcodeToday(searchHeadcode));
@@ -17,11 +12,6 @@ async function getByHeadcodeToday(req, res, next){
 }
 
 async function get(req, res, next) {
-  if (!req.isAuthed) {
-    const err = new Error('Unauthorized');
-    err.status = 401;
-    throw err;
-  }
   let date = req.params.date;
   let searchType = req.params.searchType;
   let id = req.params.id;

src/middlewares/auth.middlewares.js

@@ -6,23 +6,25 @@ module.exports = async function authCheck(req, res, next) {
   try {
     var uuid = req.headers.uuid;
   } catch(err) {
-    log.out('authMiddlewares: User !isAuthed', 'dbug');
+    log.out('authMiddlewares: No authentication attempted', 'dbug');
-    req.isAuthed = false;
+    err.status = 401;
-    return next();
+    return next(err);
   }
   try {
     var result = await utils.isAuthed(uuid) || false;
     if (!result) {
       req.isAuthed = false;
-      log.out('authMiddlewares: User !isAuthed',
+      const err = new Error('Unauthorised');
+      err.status = 401;
+      log.out('authMiddlewares: Authentication attempted with incorrect key',
         'warn');
+      return next(err);
     } else {
       req.isAuthed = true;
-      log.out('authMiddlewares: User isAuthed', 'dbug');
+      log.out('authMiddlewares: User authenticated', 'dbug');
+      return next();
     }
-    return next();
   } catch(err) {
-    req.isAuthed = false;
+    return next(err);
-    return next();
   }
 };