Jwt auth

.gitignore

@@ -1 +1,4 @@
-node_modules
+node_modules
+.env
+coverage
+testingS

authentication/OrdersAuth.js

@@ -0,0 +1,32 @@
+const Users = require('../schemas/usersModel')
+const db = require('../testingS/db.json')
+
+const userAuthenticator = (req, res) => {
+    return new Promise(async (resolve, reject) => {
+        const username = req.url.split(/[=|&]+/)
+        const password = req.url.split(/[=|&]+/)
+
+        console.log(username, password);
+
+        if (!username) {
+            reject('Username not found!')
+            return;
+        }
+
+        let user = await Users.findOne({ username: username })
+
+        if (password !== user.password) {
+            reject('Username or password incorrect, Try Again!')
+        }
+
+        const userType = user.user_type
+
+        if (userType !== 'admin') {
+            reject('You are not authorized to this route!')
+        }
+        resolve()
+    })
+}
+
+
+module.exports = userAuthenticator

authentication/authJWT.js

@@ -0,0 +1,40 @@
+require('dotenv').config()
+const passport = require('passport')
+const passportjwt = require('passport-jwt')
+const { generateJWT } = require('../utils')
+
+
+const localStrategy = require('passport-local').Strategy
+const JWTStrategy = passportjwt.Strategy
+const ExtractJWT = passportjwt.ExtractJwt
+
+passport.use(new JWTStrategy(
+    {
+        secretOrKey: process.env.SECRET_KEY,
+        jwtFromRequest: ExtractJWT.fromAuthHeaderAsBearerToken()
+    },
+    async (token, done) => {
+        try {
+            console.log(token);
+            done(null, token);
+        } catch (error) {
+            done(null, error)
+        }
+
+    }
+))
+
+passport.use('login',
+    new localStrategy({
+        usernameField: 'username',
+        passwordField: 'password'
+    }, 
+    async (username, password, done) => {
+        generateJWT(username, password)
+            .then((token) => {
+                return done(null, token)
+            }).catch((error) => {
+                return done(error)
+            })        
+    })
+)

connectMongoDB.js

@@ -0,0 +1,19 @@
+const mongoose = require('mongoose')
+require('dotenv').config()
+const connnectonUrl = process.env.MONGODB_CONNECTION_URL
+
+function connectToDB() {
+    mongoose.connect(connnectonUrl)
+
+    mongoose.connection.on("connected", () => {
+        console.log("Connected to MongoDB Successfully!");
+    });
+
+    mongoose.connection.on("error", (err) => {
+        console.log("An error occurred while connecting to MongoDB");
+        console.log(err);
+    });
+}
+
+
+module.exports = connectToDB

index.js

@@ -1,95 +1,33 @@
 const express = require('express');
-const moment = require('moment');
-const mongoose = require('mongoose');
-const orderModel = require('./orderModel');
+require('dotenv').config()
+const orderRouter = require('./routes/ordersRoutes')
+const usersRouter = require('./routes/usersRoutes')
+const connectToDB = require('./connectMongoDB');
+const passport = require('passport');
 
-const PORT = 3334
+const PORT = process.env.PORT
 
 const app = express()
+require('./authentication/authJWT')
 
-app.use(express.json());
-
-
-app.get('/', (req, res) => {
-    return res.json({ status: true })
-})
-
-
-app.post('/order', async (req, res) => {
-    const body = req.body;
-
-    const total_price = body.items.reduce((prev, curr) => {
-        prev += curr.price
-        return prev
-    }, 0);
-
-    const order = await orderModel.create({ 
-        items: body.items,
-        created_at: moment().toDate(),
-        total_price
-    })
-
-    return res.json({ status: true, order })
-})
-
-app.get('/order/:orderId', async (req, res) => {
-    const { orderId } = req.params;
-    const order = await orderModel.findById(orderId)
-
-    if (!order) {
-        return res.status(404).json({ status: false, order: null })
-    }
-
-    return res.json({ status: true, order })
-})
-
-app.get('/orders', async (req, res) => {
-    const orders = await orderModel.find()
+//Connect to Database
+connectToDB()
 
-    return res.json({ status: true, orders })
-})
-
-app.patch('/order/:id', async (req, res) => {
-    const { id } = req.params;
-    const { state } = req.body;
-
-    const order = await orderModel.findById(id)
-
-    if (!order) {
-        return res.status(404).json({ status: false, order: null })
-    }
 
-    if (state < order.state) {
-        return res.status(422).json({ status: false, order: null, message: 'Invalid operation' })
-    }
-
-    order.state = state;
-
-    await order.save()
-
-    return res.json({ status: true, order })
-})
+//Middlewares
+app.use(express.json());
+app.use('/orders',passport.authenticate('jwt', {session:false}), orderRouter)
+app.use('/users', usersRouter)
 
-app.delete('/order/:id', async (req, res) => {
-    const { id } = req.params;
 
-    const order = await orderModel.deleteOne({ _id: id})
+app.get('/secured', passport.authenticate('jwt', {session: false}), (req, res) => {
 
-    return res.json({ status: true, order })
+    return res.json({ status: true })
 })
 
 
-mongoose.connect('mongodb://localhost:27017')
-
-mongoose.connection.on("connected", () => {
-	console.log("Connected to MongoDB Successfully");
-});
-
-mongoose.connection.on("error", (err) => {
-	console.log("An error occurred while connecting to MongoDB");
-	console.log(err);
-});
-
 app.listen(PORT, () => {
     console.log('Listening on port, ', PORT)
-})
+})
+
+module.exports = app