middlewares: add authorization middleware

.env.example

@@ -6,3 +6,7 @@ DB_NAME=arrecadar
 DB_PASS=
 DB_PORT=27017
 DB_USER=
+
+FIREBASE_PROTECTED_ID=
+FIREBASE_CLIENT_EMAIL=
+FIREBASE_PRIVATE_KEY=

middlewares/authorization.js

@@ -0,0 +1,28 @@
+import firebase from 'firebase-admin'
+import { AuthenticationError } from 'apollo-server-koa'
+
+const {
+  FIREBASE_PROTECTED_ID,
+  FIREBASE_CLIENT_EMAIL,
+  FIREBASE_PRIVATE_KEY,
+} = process.env
+
+firebase.initializeApp({
+  credential: firebase.credential.cert({
+    projectId: FIREBASE_PROTECTED_ID,
+    clientEmail: FIREBASE_CLIENT_EMAIL,
+    privateKey: FIREBASE_PRIVATE_KEY.replace(/\\n/g, '\n'),
+  }),
+})
+
+export default async (token) => {
+  if (!token) {
+    return {}
+  }
+
+  try {
+    return await firebase.auth().verifyIdToken(token)
+  } catch (e) {
+    throw new AuthenticationError(e.message)
+  }
+}

package.json

@@ -31,6 +31,7 @@
   "dependencies": {
     "apollo-server-koa": "^2.0.7",
     "dotenv": "^6.0.0",
+    "firebase-admin": "^6.2.0",
     "graphql": "^14.0.2",
     "graphql-custom-types": "^1.4.0",
     "koa": "^2.5.3",