overleaf/services/web/app/coffee/Features/SudoMode/SudoModeMiddlewear.coffee

logger = require 'logger-sharelatex'
SudoModeHandler = require './SudoModeHandler'
AuthenticationController = require '../Authentication/AuthenticationController'
Settings = require 'settings-sharelatex'


module.exports = SudoModeMiddlewear =

	protectPage: (req, res, next) ->
		console.log ">>>>>> Settings", Settings.overleaf
		if req.externalAuthenticationSystemUsed() and !Settings.overleaf?
			logger.log {userId}, "[SudoMode] using external auth, skipping sudo-mode check"
			return next()
		userId = AuthenticationController.getLoggedInUserId(req)
		logger.log {userId}, "[SudoMode] protecting endpoint, checking if sudo mode is active"
		SudoModeHandler.isSudoModeActive userId, (err, isActive) ->
			if err?
				logger.err {err, userId}, "[SudoMode] error checking if sudo mode is active"
				return next(err)
			if isActive
				logger.log {userId}, "[SudoMode] sudo mode active, continuing"
				return next()
			else
				logger.log {userId}, "[SudoMode] sudo mode not active, redirecting"
				AuthenticationController._setRedirectInSession(req)
				return res.redirect('/confirm-password')