app.js

var createError = require('http-errors');
var express = require('express');
var path = require('path');
var cookieParser = require('cookie-parser');
var logger = require('morgan');

const debug = require("debug");

var app = express();

// view engine setup
app.set('views', path.join(__dirname, 'views'));
app.set('view engine', 'jade');

app.use(logger('dev'));
app.use(express.json());
app.use(express.urlencoded({ extended: false }));
app.use(cookieParser());
app.use(express.static(path.join(__dirname, 'public')));

// keycloak-y things
const Keycloak = require('keycloak-connect');
const session = require('express-session');
const memoryStore = new session.MemoryStore();
const keycloak = new Keycloak({ store: memoryStore });

// session
app.use(session({
    secret           : 'thisShouldBeLongAndSecret',
    resave           : false,
    saveUninitialized: true,
    store            : memoryStore,
}));

if (!debug.enabled()) {
    app.use(keycloak.middleware());
}

const middlewares = [
    '/',
    debug.enabled() ? undefined : checkSsoHandler,
    debug.enabled() ? undefined : keycloak.protect(),
    function (req, res, next) {
        res.render('index', {title: 'SRT'});
    }
].filter(n => n);

/* GET home page. */
app.get(...middlewares);

/* POST home page. */
app.post(...middlewares);

// quit link inside game
app.get('/quit', function(req, res, next) {
    req.session.destroy();
    res.redirect(req.protocol + '://' + process.env.LOBBY_HOST);
});

// catch 404 and forward to error handler
app.use(function(req, res, next) {
  next(createError(404));
});

// error handler
app.use(function(err, req, res, next) {
  console.log('some kind of error');
  // set locals, only providing error in development
  res.locals.message = err.message;
  res.locals.error = req.app.get('env') === 'development' ? err : {};

  // render the error page
  res.status(err.status || 500);
  res.render('error');
});

function checkSsoHandler(req, res, next){
    let should_redirect = true;
    // perform middleware function e.g. check if user is authenticated

    if (req.body.access_token != null) {
      console.log('user has an access token');
      // there's an access token parameter, so the user is _probably_ logged in
      // allow them to continue to SSO
      should_redirect = false;
      next();
    }

    if ((req.session['keycloak-token'] ? true : false) && req.kauth.grant.access_token != null) {
      console.log('user has a keycloak token');
      // the user has a token and session info, so continue to SSO
      should_redirect = false;
      next();
    }

    // missing stuff, so redirect to lobby
    if (should_redirect == true) {
      console.log('stuff is missing');
      res.redirect(req.protocol + '://' + process.env.LOBBY_HOST);
    }
}

module.exports = app;