Code samples

async function requireAuth(req, res, next) {
  const accessToken = req.cookies.accessToken;
  
  if (!accessToken) {
    return res.redirect('/login');
  }
  
  try {
    const isValid = await scalekit.validateAccessToken(accessToken);
    if (!isValid) {
      return res.redirect('/login');
    }
    next();
  } catch (error) {
    return res.redirect('/login');
  }
}

app.get('/dashboard', requireAuth, (req, res) => {
  res.render('dashboard');
});

async function refreshTokenMiddleware(req, res, next) {
  const { accessToken, refreshToken } = req.cookies;
  
  const isValid = await scalekit.validateAccessToken(accessToken);
  
  if (!isValid && refreshToken) {
    const authResult = await scalekit.refreshAccessToken(refreshToken);
    res.cookie('accessToken', authResult.accessToken);
    res.cookie('refreshToken', authResult.refreshToken);
  }
  
  next();
}

app.post('/webhooks', async (req, res) => {
  const signature = req.headers['x-scalekit-signature'];
  
  if (!verifySignature(req.body, signature)) {
    return res.status(401).send('Invalid signature');
  }
  
  const event = req.body;
  
  switch (event.type) {
    case 'user.authenticated':
      await handleUserAuthenticated(event.data);
      break;
    case 'user.created':
      await handleUserCreated(event.data);
      break;
  }
  
  res.status(200).send('OK');
});