Fiz

server/controllers/GPS.Auth.js

@@ -49,6 +49,9 @@ module.exports.login = [
         const token = await jwt.sign({ _id: user._id }, secretKey, {
           expiresIn: req.body.remember_me ? '30d' : '7d'
         })
+        if(!user.scope.includes('gps')){
+          throw new Error('err')
+        }
         user.token = token
         await user.save()
         return res.status(200).json({ token })