app_server.js

const path = require('path')
const minimist = require('minimist')
const morgan = require('morgan')
const session = require('express-session')
const express = require('express')
const debug = require('debug')('sso')

const app = express()

// get port from passed in args from scripts/start.js
const port = minimist(process.argv.slice(2)).port

const ensureLoggedIn = (req, res, next) => {
  // if we have any id_token in our session
  // or we have it in a x-session-token header
  //
  // NOTE: typically you'd use an Authorization bearer header
  // but for simplicity we're setting x-session-token
  debug('ensureLoggedIn middleware, headers %o session %o', req.rawHeaders, req.session)

  if (req.session.id_token || req.get('x-session-token')) {
    if (req.session.id_token) {
      debug('session has id token')
    } else if (req.get('x-session-token')) {
      debug('request has x-session-token')
    }

    next()
  } else {
    debug('nope, redirecting to /unauthorized')
    res.redirect('/unauthorized')
  }
}

app.use('/node_modules', express.static(path.join(__dirname, '..', '..', 'node_modules')))
app.use(morgan('dev'))

// store a session cookie called
// 'cypress-session-cookie'
app.use(session({
  name: 'cypress-session-cookie',
  secret: 'sekret',
  resave: false,
  saveUninitialized: false,
}))

// app.use((req, res, next) => {
//   console.log('session info is', req.session)
//   next()
// })

app.set('views', __dirname)
app.set('view engine', 'hbs')

// this is the url that is the 'redirectTo'
// after we log into our external auth server
app.get('/set_token', (req, res) => {
  // set the session id_token to whatever
  // is set in the query params of the URL
  req.session.id_token = req.query.id_token
  debug('/set_token, query token is %s', req.query.id_token)
  debug('redirecting to /dashboard')

  res.redirect('/dashboard')
})

app.get('/dashboard', ensureLoggedIn, (req, res) => {
  debug('rendering dashboard')
  res.render('./dashboard.hbs')
})

app.get('/config', ensureLoggedIn, (req, res) => {
  res.json({
    foo: 'bar',
    some: 'config',
    loggedIn: true,
  })
})

app.get('/unauthorized', (req, res) => {
  debug('rendering unauthorized')
  res.render('./unauthorized.hbs')
})

app.get('/', (req, res) => {
  debug('rendering /index')
  res.render('./index.hbs')
})

app.listen(port, () => {

})