Lambda-School-Labs/grants-be

View on GitHub
auth/middleware/restricted.js

Summary

Maintainability
A
0 mins
Test Coverage
const jwt = require("jsonwebtoken");

module.exports = (req, res, next) => {
    const token = req.headers.authorization;
    const jwtSecret = require("../secrets").jwtSecret;

    if (token) {
        jwt.verify(token, jwtSecret, (err, decodedToken) => {
            if (err) {
                res.status(401).json({ you: "you shall not pass" });
            } else {
                req.jwtToken = decodedToken;
                next();
            }
        });
    } else {
        res.status(401).json({ you: "you shall not pass" });
    }
};