From e06ec920f7a5d784e674c4c4b4e6d1da3dc7391d Mon Sep 17 00:00:00 2001 From: Piotr Russ Date: Mon, 16 Nov 2020 00:10:28 +0100 Subject: api, login, auth --- server/middleware/auth.js | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 server/middleware/auth.js (limited to 'server/middleware/auth.js') diff --git a/server/middleware/auth.js b/server/middleware/auth.js new file mode 100644 index 0000000..091d3a7 --- /dev/null +++ b/server/middleware/auth.js @@ -0,0 +1,23 @@ +const jwt = require('jsonwebtoken'); +const User = require('../models/User'); + +const auth = async (req, res, next) => { + try { + const token = req.header('Authorization').replace('Bearer ', ''); + const decoded = jwt.verify(token, 'replaceThisWithSecretString'); + const user = await User.findOne({ _id: decoded._id, 'tokens.token': token }); + + if (!user) { + throw new Error(); + } + + req.token = token; + req.user = user; + next(); + } catch (err) { + res.status(401).send({ error: 'Not authenticated.' }); + } + +}; + +module.exports = auth; -- cgit v1.2.3