front end recognizes session/user info

server/auth/middlewares.ts

@@ -9,6 +9,9 @@ export function restrictAccess(req: Request, res: Response, next: NextFunction)
 }
 
 export function checkAccess(req: Request, res: Response, next: NextFunction) {
-    console.log(req.isAuthenticated());
-    next();
+    if (req.isAuthenticated()) {
+        next();
+    } else {
+        res.status(403).send({ message: "Access forbidden" });
+    }
 }

server/loaders/express.ts

@@ -7,11 +7,18 @@ import session from 'express-session';
 import pgSessionStore from '../db/sessionStore';
 
 export const expressLoader = async (app: Express) => {
-    app.use(cors());
+    app.use(cors({
+        origin: process.env.ORIGIN || 'http://localhost:5173',
+        credentials: true
+      }));
+
     app.use(bodyParser.json());
     app.use(bodyParser.urlencoded({ extended: true }));
     app.use(cookieParser());
 
+    // app.options("*", cors({ origin: 'http://localhost:5173', optionsSuccessStatus: 200 }));
+    // app.use(cors({ origin: "http://localhost:5173", optionsSuccessStatus: 200 }));
+
     app.use(morgan('tiny'));
 
     app.get('/', (req, res) => {

server/routes/auth.ts

@@ -15,15 +15,19 @@ export const authRoute = (app: Express, passport: PassportStatic) => {
     app.use('/auth', router);
 
     router.get('/', checkAccess, (req, res, next) => {
-        // @ts-ignore: does not recognize structure of req.user
-        const user = req.user?.user;
-        const userData: IUser = {
-            firstname: user.firstname,
-            lastname: user.lastname,
-            handle: user.handle,
-            email: user.email
+        if (req.isAuthenticated()) {
+            // @ts-ignore: does not recognize structure of req.user
+            const user = req.user?.user;
+            const userData: IUser = {
+                firstname: user.firstname,
+                lastname: user.lastname,
+                handle: user.handle,
+                email: user.email
+            }
+            res.send({ user: userData });
+        } else {
+            res.status(403).send({ message: "Access forbidden" });
         }
-        res.send({ user: userData });
     })
 
     router.get('/protected', restrictAccess, (req, res, next) => {