feat: Add authentication protection to books creation

src/middlewares/auth.js

@@ -0,0 +1,9 @@
+function checkAuth(ctx, next) {
+  const { currentUser } = ctx.state;
+  if (!currentUser) ctx.throw(401);
+  return next();
+}
+
+module.exports = {
+  checkAuth,
+};

src/routes.js

@@ -10,23 +10,37 @@ const session = require('./routes/session');
 const router = new KoaRouter();
 
 router.use(async (ctx, next) => {
-    if (ctx.session.currentUserId){
-      ctx.state.currentUser = await ctx.orm.user.findByPk(ctx.session.currentUserId);
+  try {
+    await next();
+  } catch (err) {
+    switch (err.status) {
+      case 401:
+        ctx.app.emit('error', err, ctx);
+        ctx.redirect(ctx.router.url('session.new'));
+        break;
+      default:
+        throw err;
     }
-    return next();
-  });
-
+  }
+});
+
+router.use(async (ctx, next) => {
+  if (ctx.session.currentUserId) {
+    ctx.state.currentUser = await ctx.orm.user.findByPk(ctx.session.currentUserId);
+  }
+  return next();
+});
+
 router.use(async (ctx, next) => {
-    Object.assign(ctx.state, {
-      paths: {
-        destroySession: ctx.router.url('session.destroy'),
-        newSession: ctx.router.url('session.new'),
-
-      },
-    });
-    return next();
+  Object.assign(ctx.state, {
+    paths: {
+      destroySession: ctx.router.url('session.destroy'),
+      newSession: ctx.router.url('session.new'),
+
+    },
   });
-
+  return next();
+});
 
 router.use('/', index.routes());
 router.use('/hello', hello.routes());
@@ -35,5 +49,4 @@ router.use('/books', books.routes());
 router.use('/authors/:authorId/books', booksForAuthors.routes());
 router.use('/session', session.routes());
 
-
 module.exports = router;

src/routes/books.js

@@ -1,7 +1,10 @@
 const KoaRouter = require('koa-router');
+const { checkAuth } = require('../middlewares/auth');
 
 const router = new KoaRouter();
 
+router.use(checkAuth);
+
 router.get('books.new', '/new', async (ctx) => {
   const book = ctx.orm.book.build();
   const authorList = await ctx.orm.author.findAll();

src/routes/booksForAuthors.js

@@ -1,7 +1,10 @@
 const KoaRouter = require('koa-router');
+const { checkAuth } = require('../middlewares/auth');
 
 const router = new KoaRouter();
 
+router.use(checkAuth);
+
 async function getAuthor(ctx, next) {
   ctx.state.author = await ctx.orm.author.findByPk(ctx.params.authorId);
   if (!ctx.state.author) return ctx.throw(404);

src/views/authors/show.html.ejs

@@ -9,5 +9,7 @@
             <li><%= book.title %></li>
         <% }) %>
     </ul>
-    <a href="<%= newBookPath %>">Agregar libro</a>
+    <% if (locals.currentUser) { %>
+        <a href="<%= newBookPath %>">Agregar libro</a>
+    <% } %>
 <% } %>

src/views/index.html.ejs

@@ -4,6 +4,8 @@
   <%= appVersion %>
 </p>
 <div>Esta es una aplicaición con código de ejemplo para el uso del template, que no considera estilos. <a href="<%=authorsPath%>">Ver autores</a></div>
-<a href="<%= newBookPath %>">Agregar libro</a>
+<% if (locals.currentUser) { %>
+  <a href="<%= newBookPath %>">Agregar libro</a>
+<% } %>
 <br>
 <div id="react-app">Here a React app will be rendered</div>