backend/middlewares/authenticate.js

const jwt = require('jsonwebtoken');
const { jwtSecret } = require('../config/config');

function authenticate(req, res, next) {
	const token = req.get('Authorization');

	if (token) {
		jwt.verify(token, jwtSecret, (err, decoded) => {
			if (err) return res.status(401).json(err);
			req.decoded = decoded;
			next();
		});
	} else {
		return res.status(401).json({
			error: 'No token provided, must be set on the Authorization Header',
		});
	}
}

exports.authenticate = authenticate;