back-end done

This commit is contained in:
Amir Mohamadi
2020-12-10 16:36:48 +03:30
parent 80a7abafb7
commit bc5e617778
92 changed files with 5217 additions and 3379 deletions
+2 -25
View File
@@ -1,10 +1,10 @@
const jwt = require('jsonwebtoken');
const Admin = require('./models/admin/Admin')
const User = require('./models/user/User')
const config = {
// secret for generating jwt token
secretKey: '2664debdbef6fdd2ae52ba2c9cd4d1d15f3cdca31a641aacad1a5c43cda91b55a145b3f4c573f69aeba3c942bf55417593ff74f7d192a5664358ee753ea09e8e'
secretKey: 'b8a537eefc8e8e938509bd6a557e51d8f9459842691b013254fb8f31e6d6c78713f65fad589f0b036481907b7014e249d28da1ea359f8a5b7f59da3aa5b0455f'
}
module.exports = config
@@ -31,26 +31,3 @@ module.exports.isAdmin = function (req, res, next) {
return res.status(401).json({message: 'unauthorized'})
}
}
// check if user logged in
module.exports.isUser = function (req, res, next) {
const token = req.headers.authorization
if (token) {
// check if token is not destroyed
User.findOne({token: token}, (err, user) => {
if (err) throw err
if (user) {
// verifies secret and checks if the token is expired
jwt.verify(user.token.replace(/^Bearer\s/, ''), config.secretKey, (err, decoded) => {
if (err) {
return res.status(401).json({message: 'unauthorized'})
} else {
return next()
}
})
} else return res.status(401).json({message: 'unauthorized'})
})
} else {
return res.status(401).json({message: 'unauthorized'})
}
}