typescript: req.user is possibly 'undefined' - express and passport js

user_14843608 0
Viewed 1575

I have a Nodejs typescript authentication system that works using passport.

My problem is that when I use req.user in a route I get this error on req.user: Object is possibly 'undefined'.

This is a normal behavior of Typescript but I am using a middleware to protect routes that I want to use req.user in them and this way req.user cannot be undefined.

This is where I extend Express.User Type:

import { users } from "@prisma/client";

declare global {
    namespace Express {
        interface User extends users {}
    }
}

This is the middleware that I'm using to protect routes for logged in users:

export function checkIsAuthenticated(req: Request, res: Response, next: NextFunction) {
    if (req.isAuthenticated()) {
        if (!req.user) req.logOut();
        else return next();
    }
    res.status(400).json({
        errors: [{ message: "no user logged in" }],
    });
}

And this is the route for getting the user info:

export function userRoute(req: Request, res: Response) { // defining the route
    res.json({
        id: req.user.id,               // I'm getting the error in these 4 lines
        username: req.user.username,   //
        email: req.user.email,         //
        role: req.user.role,           //
    });
}

router.get("/user", checkIsAuthenticated, userRoute); // using the route

I don't want to check if user is defined because I don't want to do it in every route and that's not a good practice. That's why middleware are for.

I'm not good at Typescript so I need some help to fix it. Thanks

passport.js typescript express node.js
2 Answers

I don't want to check if user is defined because I don't want to do it in every route and that's not a good practice.

My first solution trying to accommodate that requirement didn't work, so I've removed it. I've left my second solution, which is:

But, I'd quibble that there's nothing wrong with checking the request for a user and giving yourself a nice useful error message if you've accidentally used one of these handlers on a route that you forgot to put the authentication on. That would look like this:

type RequestWithUser = Request & {user: typeOfUserObject};
function assertHasUser(req: Request): asserts req is RequestWithUser {
    if (!( "user" in req)) {
        throw new Error("Request object without user found unexpectedly");
    }
}

Then your handler for those routes:

export function userRoute(req: Request, res: Response) {
    assertHasUser(req);
    // ...you can use `req.user` here...
});

Playground example

(You don't really need the explicit RequestWithUser type, you could just use asserts req is Request & {user: typeOfUserObject}.)

user_1572470 

export function userRoute(req: Request, res: Response) { // defining the route
    res.json({
        id: req.user!.id,               // you tell typescript that req.user for sure not. null
        username: req.user!.username,   //
        email: req.user!.email,         //
        role: req.user!.role,           //
    });
}

router.get("/user", checkIsAuthenticated, userRoute);

user_142877400
Related