src/middleware/auth.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

import User from '../models/User.js';

async function authenticate(req, res, next) {
    const header = req.headers.authorization;

    if (!header) {
        return res.status(401).json({ error: 'missing_token' });
    }

    const parts = header.split(' ');
    if (parts.length !== 2 || parts[0] !== 'Bearer') {
        return res.status(401).json({ error: 'invalid_token_format' });
    }

    const token = parts[1];
    const user = await User.findOne({ token: token });

    if (!user) {
        return res.status(401).json({ error: 'invalid_token' });
    }

    req.user = user;
    next();
}

export { authenticate };