Fix auth handler

Author: alexandrudanpop

packages/react-ui/src/app/interceptors/index.ts

@@ -1,23 +1,12 @@
 import axios from 'axios';
 
-import { createRequestInterceptor } from './request-interceptor';
 import {
   createFederatedResponseInterceptor,
   createResponseInterceptor,
 } from './response-interceptor';
 
-let requestInterceptorId: number | null = null;
 let responseInterceptorId: number | null = null;
 
-function setupRequestInterceptor(): void {
-  if (requestInterceptorId === null) {
-    const requestInterceptor = createRequestInterceptor();
-    requestInterceptorId = axios.interceptors.request.use(requestInterceptor);
-  }
-}
-
-setupRequestInterceptor();
-
 type ResponseInterceptorOptions = {
   isFederatedAuth: boolean;
 };

packages/react-ui/src/app/interceptors/request-interceptor.ts

@@ -1,4 +1,4 @@
-import { cacheWrapper, logger } from '@openops/server-shared';
+import { logger } from '@openops/server-shared';
 import {
   ApplicationError,
   ErrorCode,
@@ -11,15 +11,13 @@ import { userService } from '../../../user/user-service';
 import { BaseSecurityHandler } from '../security-handler';
 
 export class AccessTokenAuthnHandler extends BaseSecurityHandler {
-  private static readonly HEADER_NAME = 'authorization';
-  private static readonly HEADER_PREFIX = 'Bearer ';
+  private static readonly COOKIE_NAME = 'token';
 
   protected canHandle(request: FastifyRequest): Promise<boolean> {
-    const header = request.headers[AccessTokenAuthnHandler.HEADER_NAME];
-    const prefix = AccessTokenAuthnHandler.HEADER_PREFIX;
-    const routeMatches = header?.startsWith(prefix) ?? false;
+    const token = request.cookies?.[AccessTokenAuthnHandler.COOKIE_NAME];
+    const hasToken = !isNil(token);
     const skipAuth = request.routeOptions.config?.skipAuth ?? false;
-    return Promise.resolve(routeMatches && !skipAuth);
+    return Promise.resolve(hasToken && !skipAuth);
   }
 
   protected async doHandle(request: FastifyRequest): Promise<void> {
@@ -50,9 +48,7 @@ export class AccessTokenAuthnHandler extends BaseSecurityHandler {
   }
 
   private extractAccessTokenOrThrow(request: FastifyRequest): string {
-    const header = request.headers[AccessTokenAuthnHandler.HEADER_NAME];
-    const prefix = AccessTokenAuthnHandler.HEADER_PREFIX;
-    const accessToken = header?.substring(prefix.length);
+    const accessToken = request.cookies?.[AccessTokenAuthnHandler.COOKIE_NAME];
 
     if (isNil(accessToken)) {
       throw new ApplicationError({