Iknowgit/middleware.js at main · arvidon/Iknowgit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
// const jwt = require('jsonwebtoken')
// const SECRET_KEY = "@123!exclaim"


// function authMiddleWare(req, res, next){
//     const authHeader = req.headers.authorization
//     if(!authHeader){
//         return res.status(400).json({message: "authHeader is missing"})
//     }
//     const token = authHeader.split(' ')[1]
//     if(!token){
//         return res.status(400).json({message: "token is invalid"})
//     }
//     try{
//         const decoded = jwt.verify(token, SECRET_KEY)
//         req.user = decoded
//         next()
//     }
//     catch(err){
//         return res.status(400).json({message: "Error occured"})
//     }
// }

// function adminOnly(req, res, next){
//     if(!req.role == "admin"){
//         return res.status(401).json({
//             success: false,
//             error: "Unauthorized, admin access required"
//         })
//     }
// }

// module.exports = {authMiddleWare, SECRET_KEY, adminOnly}

const jwt = require('jsonwebtoken')
const SECRET_RANDOM = "blackbear!411"

function middleware(req, res, next){
    const authHead = req.headers.authorization
    if(!authHead){
        return res.status(400).json({message: "header is missing"})
    }
    const token = authHead.split(' ')[1]
    if(!token){
        return res.status(400).json({message: "token is missing"})
    }
    try{
        const decoded = jwt.verify(token, SECRET_RANDOM)
        req.user = decoded
        next()
    }
    catch(err){
        return res.status(401).json({
            success: false,
            error: "unauthorized, token is missing or invalid"
        })
    }
}

function adminOnly(req, res, next){
    if(!req.role == "admin"){
        res.status(401).json({
            success: false,
            error: "unauthorized, admin access required"
        })
    }
}


module.exports = {middleware, adminOnly, SECRET_RANDOM}