Merge pull request #43 from nico-iaco/feature/firebaseTokenForBackend

added token authentication for food-track-be apis 🔒
nico-iaco · Dec 26, 2022 · 49d76d0 · 49d76d0
2 parents 5c2dd7a + 32a1f45
commit 49d76d0
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 12 deletions.
diff --git a/firebase.json b/firebase.json
@@ -29,7 +29,7 @@
     ],
     "headers": [
       {
-        "source": "/**",
+        "source": "!/api/**",
         "headers": [
           {
             "key": "Cache-Control",

diff --git a/src/api/mealApis.ts b/src/api/mealApis.ts
@@ -4,16 +4,21 @@ import {Meal} from "../model/meal";
 import {FoodConsumption} from "../model/foodConsumption";
 import {MealStatistic} from "../model/mealStatistic";
 import {format} from "date-fns";
+import {getFirebaseUserToken} from "../utils/firebaseUtils";
 
 
 export const baseUrl = process.env.REACT_APP_BASE_URL_FT;
 
 export const addMeal = async (meal: Meal, controller: AbortController) => {
     const url = `${baseUrl}/meal/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.post(
         url,
         meal,
         {
+            headers: {
+                "Authorization": `Bearer ${token}`
+            },
             signal: controller.signal,
         }
     );
@@ -23,9 +28,13 @@ export const addMeal = async (meal: Meal, controller: AbortController) => {
 
 export const getAllMeals = async (controller: AbortController) => {
     const url = `${baseUrl}/meal/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.get(
         url,
         {
+            headers: {
+                "Authorization": `Bearer ${token}`
+            },
             signal: controller.signal,
         }
     );
@@ -37,9 +46,10 @@ export const getAllMealInDateRange = async (startDate: Date, endDate: Date, user
     const formattedStartDate = format(new Date(startDate), "dd-MM-yyyy")
     const formattedEndDate = format(new Date(endDate), "dd-MM-yyyy")
     const url = `${baseUrl}/meal/?startRange=${formattedStartDate}&endRange=${formattedEndDate}`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.get(url, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -52,9 +62,10 @@ export const getAllMealInDateRange = async (startDate: Date, endDate: Date, user
 
 export const getMealStatistics = async (userid: string, controller: AbortController) => {
     const url = `${baseUrl}/meal/statistics/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.get(url, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -68,10 +79,11 @@ export const getMealStatistics = async (userid: string, controller: AbortControl
 export const getMealStatisticsInDateRange = async (startDate: Date, endDate: Date, userid: string, controller: AbortController) => {
     const formattedStartDate = format(new Date(startDate), "dd-MM-yyyy")
     const formattedEndDate = format(new Date(endDate), "dd-MM-yyyy")
+    const token = await getFirebaseUserToken();
     const url = `${baseUrl}/meal/statistics/?startRange=${formattedStartDate}&endRange=${formattedEndDate}`;
     const axiosResponse = await axios.get(url, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -84,9 +96,10 @@ export const getMealStatisticsInDateRange = async (startDate: Date, endDate: Dat
 
 export const updateMeal = async (meal: Meal, userid: string, controller: AbortController) => {
     const url = `${baseUrl}/meal/${meal.id}/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.patch(url, meal, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -99,9 +112,10 @@ export const updateMeal = async (meal: Meal, userid: string, controller: AbortCo
 
 export const deleteMeal = async (id: string, userid: string, controller: AbortController) => {
     const url = `${baseUrl}/meal/${id}/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.delete(url, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -114,9 +128,10 @@ export const deleteMeal = async (id: string, userid: string, controller: AbortCo
 
 export const getMealFoodConsumptions = async (mealId: string, userid: string, controller: AbortController) => {
     const url = `${baseUrl}/meal/${mealId}/consumption/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.get(url, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -129,12 +144,13 @@ export const getMealFoodConsumptions = async (mealId: string, userid: string, co
 
 export const addMealFoodConsumption = async (mealId: string, foodConsumption: FoodConsumption, userid: string, controller: AbortController) => {
     const url = `${baseUrl}/meal/${mealId}/consumption/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.post(
         url,
         foodConsumption,
         {
             headers: {
-                "iv-user": userid
+                "Authorization": `Bearer ${token}`
             },
             signal: controller.signal,
         }
@@ -148,9 +164,10 @@ export const addMealFoodConsumption = async (mealId: string, foodConsumption: Fo
 
 export const updateMealFoodConsumption = async (mealId: string, foodConsumption: FoodConsumption, userid: string, controller: AbortController) => {
     const url = `${baseUrl}/meal/${mealId}/consumption/${foodConsumption.id}/`;
+    const token = await getFirebaseUserToken();
     const axiosResponse = await axios.patch(url, foodConsumption, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });
@@ -162,10 +179,11 @@ export const updateMealFoodConsumption = async (mealId: string, foodConsumption:
 }
 
 export const deleteMealFoodConsumption = async (mealId: string, foodConsumptionId: string, userid: string, controller: AbortController) => {
+    const token = await getFirebaseUserToken();
     const url = `${baseUrl}/meal/${mealId}/consumption/${foodConsumptionId}/`;
     const axiosResponse = await axios.delete(url, {
         headers: {
-            "iv-user": userid
+            "Authorization": `Bearer ${token}`
         },
         signal: controller.signal,
     });

diff --git a/src/utils/firebaseUtils.ts b/src/utils/firebaseUtils.ts
@@ -1,5 +1,6 @@
-import { initializeAnalytics } from "firebase/analytics";
-import { initializeApp } from "firebase/app";
+import {initializeAnalytics} from "firebase/analytics";
+import {initializeApp} from "firebase/app";
+import {getAuth} from "firebase/auth";
 
 const apiKey = process.env.REACT_APP_API_KEY;
 const messagingSenderId = process.env.REACT_APP_MESSAGING_SENDER_ID;
@@ -19,4 +20,12 @@ const firebaseConfig = {
 export const app = initializeApp(firebaseConfig);
 export const analytics = initializeAnalytics(app);
 
+export const getFirebaseUserToken = async () => {
+    const user = getAuth().currentUser;
+    if (user) {
+        return await user.getIdToken();
+    }
+    return null;
+}
+