jwt.js

const jwt = require('jsonwebtoken');

const jwtAuthMiddleware = (req, res, next) => {
    // First check if the request headers have authorization or not
    const authorization = req.headers.authorization;
    if (!authorization) return res.status(401).json({ error: 'Token not found' });

    // Extract the JWT token from the request headers
    const token = authorization.split(' ')[1];  // FIXED SPLIT

    if (!token) return res.status(401).json({ error: 'Unauthorized' });

    try {
        // Verify the JWT token
        const decoded = jwt.verify(token, process.env.JWT_SECRET);

        // Attach user information to the request object
        req.user = decoded;
        next();
    } catch (err) {
        console.error("JWT Error: ", err);
        res.status(401).json({ error: 'Invalid token' });
    }
};

// Function to generate JWT token
const generateToken = (userData) => {
    return jwt.sign(userData, process.env.JWT_SECRET, { expiresIn: 30000 }); // Token expires in 30000 seconds
};

module.exports = { jwtAuthMiddleware, generateToken };