Identify user based on the JWT attached with request

DMehaffy · October 15, 2021, 8:36pm

Policy yes would be the best location, albeit not a great example (please don’t write a huge single policy for multiple endpoints like I did in the example) but it gives a bit of context on how you can handle stuff like this in policies:

github.com

derrickmehaffy/strapi-testing-isowner/blob/main/config/policies/isOwnerNotes.js

module.exports = async (ctx, next) => {
  let route = ctx.request.route;

  // Use these to log data coming from the user
  // Koa Docs: https://koajs.com/#request
  // console.log(ctx.request.route);
  // console.log(ctx.query)
  // console.log(ctx.params)
  // console.log(ctx.request.body)
  // console.log(ctx.state.user)

  if (ctx.state.user) {
    // FIND & COUNT
    if (route.action === "find" || route.action === "count") {
      if (Object.keys(ctx.query).length === 0) {
        ctx.query = {
          user: ctx.state.user.id,
        };
      } else {
        ctx.query.user = ctx.state.user.id;

This file has been truncated. show original

PS this is a horribly written example, but you get the idea.