feat: Update authentication middleware (#6447)

* authentication middleware update

* disable customer authentication

* call correct feature flag method

* fix authentication middleware for store/customers

* fix integration tests and add middleware for admin customers

* update seeders

* customer groups fix

* add authentication middleware for all admin endpoints

* Feat(medusa, user): require authentication for invite accept (#6448)

* initial invite token validation for authentication invocation

* remove invite auth

* remove unused import

* cleanup tests

* refactor to auth instead of auth_user

* pr feedback

* update authenticatedRequest type

* update store authenticated endpoints

* update routes with type

* fix build

* fix build

* fix build

* use auth middleware for api-keys

packages/medusa/src/api/middlewares/authenticate-customer.ts

@@ -1,4 +1,6 @@
+import { ContainerRegistrationKeys, MedusaV2Flag } from "@medusajs/utils"
 import { NextFunction, Request, RequestHandler, Response } from "express"
+
 import passport from "passport"
 
 // Optional customer authentication
@@ -6,6 +8,13 @@ import passport from "passport"
 // If you want to require authentication, use `requireCustomerAuthentication` in `packages/medusa/src/api/middlewares/require-customer-authentication.ts`
 export default (): RequestHandler => {
   return (req: Request, res: Response, next: NextFunction): void => {
+    const featureFlagRouter = req.scope.resolve(
+      ContainerRegistrationKeys.FEATURE_FLAG_ROUTER
+    )
+    if (featureFlagRouter.isFeatureEnabled(MedusaV2Flag.key)) {
+      return next()
+    }
+
     passport.authenticate(
       ["store-session", "store-bearer"],
       { session: false },

packages/medusa/src/api/middlewares/authenticate.ts

@@ -1,12 +1,19 @@
+import { ContainerRegistrationKeys, MedusaV2Flag } from "@medusajs/utils"
 import { NextFunction, Request, RequestHandler, Response } from "express"
+
 import passport from "passport"
 
 export default (): RequestHandler => {
   return (req: Request, res: Response, next: NextFunction): void => {
-    passport.authenticate(["admin-session", "admin-bearer", "admin-api-token"], { session: false })(
-      req,
-      res,
-      next
+    const featureFlagRouter = req.scope.resolve(
+      ContainerRegistrationKeys.FEATURE_FLAG_ROUTER
     )
+    if (featureFlagRouter.isFeatureEnabled(MedusaV2Flag.key)) {
+      return next()
+    }
+    passport.authenticate(
+      ["admin-session", "admin-bearer", "admin-api-token"],
+      { session: false }
+    )(req, res, next)
   }
 }