From 1870f3fdf43707a15fda0f609a021f516f45eb63 Mon Sep 17 00:00:00 2001
From: Piotr Russ <mail@pruss.it>
Date: Wed, 18 Nov 2020 23:15:38 +0100
Subject: finish auth routes, create cookie token, fix folder structure, add
 context to FE

---
 server/middleware/auth.js | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

(limited to 'server/middleware/auth.js')

diff --git a/server/middleware/auth.js b/server/middleware/auth.js
index 091d3a7..42d93a4 100644
--- a/server/middleware/auth.js
+++ b/server/middleware/auth.js
@@ -3,7 +3,12 @@ const User = require('../models/User');
 
 const auth = async (req, res, next) => {
   try {
-    const token = req.header('Authorization').replace('Bearer ', '');
+    const token = req.cookies.token || '';
+
+    if (!token) {
+      throw new Error();
+    }
+
     const decoded = jwt.verify(token, 'replaceThisWithSecretString');
     const user = await User.findOne({ _id: decoded._id, 'tokens.token': token });
 
@@ -15,7 +20,7 @@ const auth = async (req, res, next) => {
     req.user = user;
     next();
   } catch (err) {
-    res.status(401).send({ error: 'Not authenticated.' });
+    res.redirect('/login');
   }
 
 };
-- 
cgit v1.2.3