2020-11-29 09:05:56 -08:00
|
|
|
const jwt = require("jsonwebtoken");
|
2020-12-07 09:49:14 -08:00
|
|
|
const config = require("config");
|
2020-11-29 09:05:56 -08:00
|
|
|
|
|
|
|
const auth = (req, res, next) => {
|
|
|
|
try {
|
|
|
|
const token = req.header("x-auth-token");
|
|
|
|
if (!token)
|
|
|
|
return res
|
|
|
|
.status(401)
|
|
|
|
.json({ msg: "No authentication token, authorization denied." });
|
|
|
|
|
2020-12-07 09:49:14 -08:00
|
|
|
const verified = jwt.verify(token, config.get("jwtSecret") );
|
2020-11-29 09:05:56 -08:00
|
|
|
if (!verified)
|
|
|
|
return res
|
|
|
|
.status(401)
|
|
|
|
.json({ msg: "Token verification failed, authorization denied." });
|
|
|
|
|
|
|
|
req.user = verified.id;
|
|
|
|
next();
|
|
|
|
} catch (err) {
|
|
|
|
res.status(500).json({ error: err.message });
|
|
|
|
}
|
|
|
|
};
|
|
|
|
|
|
|
|
module.exports = auth;
|