34 lines
1.3 KiB
JavaScript
34 lines
1.3 KiB
JavaScript
const jwt = require('jsonwebtoken')
|
|
const config = require('./config')
|
|
const User = require('./models/user')
|
|
|
|
const Auth = {
|
|
async fillUser (req, res, next) {
|
|
const token = req.body.token || req.params.token || req.headers['x-access-token']
|
|
console.log('[AUTH] ', token)
|
|
if (!token) next()
|
|
jwt.verify(token, config.secret, async (err, decoded) => {
|
|
if (err) next()
|
|
req.user = await User.findOne({ where: { email: decoded.email, is_active: true } })
|
|
next()
|
|
})
|
|
},
|
|
async isAuth (req, res, next) {
|
|
const token = req.body.token || req.params.token || req.headers['x-access-token']
|
|
console.log('[AUTH] ', token)
|
|
if (!token) return res.status(403).send({ message: 'Token not found' })
|
|
jwt.verify(token, config.secret, async (err, decoded) => {
|
|
if (err) return res.status(403).send({ message: 'Failed to authenticate token ' + err })
|
|
console.log('DECODED TOKEN', decoded)
|
|
req.user = await User.findOne({ where: { email: decoded.email, is_active: true } })
|
|
if (!req.user) return res.status(403).send({ message: 'Failed to authenticate token ' + err })
|
|
next()
|
|
})
|
|
},
|
|
async isAdmin (req, res, next) {
|
|
if (req.user.is_admin && req.user.is_active) return next()
|
|
return res.status(403).send({ message: 'Admin needed' })
|
|
}
|
|
}
|
|
|
|
module.exports = Auth
|