Shegsdev/Banka

import { config } from 'dotenv';
import jwt from 'jsonwebtoken';
import User from '../models/user';

config();

const Auth = {
  // eslint-disable-next-line consistent-return
  async tokenVerify(req, res, next) {
    const token = req.headers['x-access-token'];
    if (!token) {
      return res.status(401).json({
        status: 401,
        error: 'Unable to verify token',
      });
    }

    try {
      const decoded = jwt.verify(token, process.env.SECRET);
      const user = await User.findBy('email', decoded.username);
      if (user.rows[0].length < 1) {
        res.status(403).json({
          status: 403,
          error: 'Invalid email or password',
        });
      }
      req.user = {
        id: user.rows[0].id,
        isStaff: user.rows[0].is_staff,
        isAdmin: user.rows[0].is_admin,
      };
    } catch (error) {
      // eslint-disable-next-line eqeqeq
      if (error == 'TokenExpiredError: jwt expired' || error == 'invalid token') {
        return res.status(401).json({
          status: 401,
          error: 'Session expired. Please sign in again',
        });
      }
      return res.status(500).json({
        status: 500,
        error: `Something went wrong - ${error}`,
      });
    }
    next();
  },
};

export default Auth;