Route - prevent pre/post middleware from being applied twice

src/auth/middleware/SessionAuthMiddleware.ts

@@ -7,6 +7,7 @@ import {SessionSecurityContext} from '../contexts/SessionSecurityContext'
 import {SecurityContext} from '../SecurityContext'
 import {ORMUserRepository} from '../orm/ORMUserRepository'
 import {AuthConfig, AuthenticatableRepositories} from '../config'
+import {Logging} from '../../service/Logging'
 
 /**
  * Injects a SessionSecurityContext into the request and attempts to
@@ -17,7 +18,11 @@ export class SessionAuthMiddleware extends Middleware {
     @Inject()
     protected readonly config!: Config
 
+    @Inject()
+    protected readonly logging!: Logging
+
     async apply(): Promise<ResponseObject> {
+        this.logging.debug('Applying session auth middleware...')
         const context = <SessionSecurityContext> this.make(SessionSecurityContext, this.getRepository())
         this.request.registerSingletonInstance(SecurityContext, context)
         await context.resume()

src/http/routing/Route.ts

@@ -87,11 +87,15 @@ export class Route extends AppClass {
             for ( const group of stack ) {
                 route.prepend(group.prefix)
                 group.getGroupMiddlewareDefinitions()
-                    .each(def => route.prependMiddleware(def))
+                    .where('stage', '=', 'pre')
+                    .each(def => {
+                        route.prependMiddleware(def)
+                    })
             }
 
             for ( const group of this.compiledGroupStack ) {
                 group.getGroupMiddlewareDefinitions()
+                    .where('stage', '=', 'post')
                     .each(def => route.appendMiddleware(def))
             }