import { Auth0 } from "@usefultools/auth0-node" 

const auth0 = new Auth0("test.auth0.com")

import { Auth0, Session } from "@usefultools/auth0-node" 
import { isNonEmptyString } from "@usefultools/utils"

const auth0 = new Auth0("test.auth0.com")

async function isAuthorised(req: Request, res: Response, next: Next): Promise<void> {
  const { headers } = req

  const bearerStr = "Bearer "
  const authHeader = headers[HeaderKey.Authorization]

  if (isNonEmptyString(authHeader) && authHeader.startsWith(bearerStr)) {
    const token = authHeader.substring(bearerStr.length, authHeader.length)

    try {
      const decoded = await auth0.verifyToken(token)

      Object.assign(req, { ctx: {
        ...req.ctx,
        session: decoded,
      }})

      next()
    } catch (err) {
      res.error(unauthorized(err))
    }
  } else {
    res.error(unauthorized("Invalid or missing token"))
  }
}